last executing test programs: 6m24.239277321s ago: executing program 0 (id=1): r0 = socket(0x6, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250003000000002020c31af8ffa1000000bfa10000000000000701000000feffffb702000008000000b70300000000000085000000ca0000009500000000000000", @ANYRESHEX=r0], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) write$FUSE_INIT(r3, &(0x7f0000000140)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) r4 = syz_io_uring_setup(0x230, &(0x7f0000000140)={0x0, 0x0, 0x10100, 0x200}, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index, 0x0, 0x0, 0x40007ee, 0x2, 0x1, {0x0, 0x0, r0}}) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f00000079c0)={0x2020}, 0x2020) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) connect$netrom(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB='\x00\x00\x00', @ANYRESHEX, @ANYRESOCT]) socket$inet6_udplite(0xa, 0x2, 0x88) socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022400010000000009040000025883b200090584000000000000090507"], 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000020109040000000000000000021f"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) 6m17.070002877s ago: executing program 0 (id=24): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x87, &(0x7f0000000400)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0xd, 0x4, 0x0, 0x0, 0x79, 0x67, 0x0, 0x0, 0x11, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x1f, 0x3, [{0x1, 0x2}, {0x1, 0x12, "2ed50de8474f1917bf157ac4b0020800"}, {0x1, 0x5, "4740c2"}]}]}}, {0x1, 0x4e20, 0x45, 0x0, @opaque="d44464bfacbc42fb46565baf9238ee1e70bdca7032f0c9bc50d6651b049308293ea2065e84580843c7cee9fae33a0bc99d8001ecbac79edb55f2c36b5f"}}}}}, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r0, 0xa, 0x21) fcntl$setlease(r0, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() sched_setscheduler(r2, 0x0, &(0x7f0000000180)=0x8001) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$watch_queue(0x0, 0x80) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='block_bio_remap\x00', r5}, 0x10) r6 = dup2(r4, r4) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x0, 0xd, 0x1, 0x8}) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x501, 0x0) close_range(r7, r7, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000180)=0x10000, 0x4) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, {0x8, 0x7f, 0x7ab8, 0x7aa}}) 6m12.350682997s ago: executing program 0 (id=31): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) r4 = socket$nl_crypto(0x10, 0x3, 0x15) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x3, 0x0, 'queue1\x00', 0x8001}) writev(r5, &(0x7f0000000580)=[{&(0x7f0000000000)="218292", 0xfff6}], 0x2) sendmsg$netlink(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="e000000010000b0500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff2d5f28732c5f289423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3ee58a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d68100000011000080a64a6f8911da237ba323a96d750000000000"], 0xe0}], 0x1}, 0x0) listen(r0, 0xb) 5m57.227034504s ago: executing program 32 (id=31): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) r4 = socket$nl_crypto(0x10, 0x3, 0x15) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x3, 0x0, 'queue1\x00', 0x8001}) writev(r5, &(0x7f0000000580)=[{&(0x7f0000000000)="218292", 0xfff6}], 0x2) sendmsg$netlink(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="e000000010000b0500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff2d5f28732c5f289423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3ee58a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d68100000011000080a64a6f8911da237ba323a96d750000000000"], 0xe0}], 0x1}, 0x0) listen(r0, 0xb) 2m37.020420192s ago: executing program 4 (id=911): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0xd9}, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) 2m32.640408038s ago: executing program 4 (id=921): openat$fb0(0xffffffffffffff9c, 0x0, 0xc0c01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x14) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m29.893897961s ago: executing program 4 (id=924): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r3) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)={0x14, r4, 0x48212b8952c3aff5, 0x70bd24}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2m27.747092526s ago: executing program 4 (id=929): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, 0x0, 0x4000810) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00000000017c0000040042801400018006000600800a000006001700980a0000040002"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) 2m26.472864092s ago: executing program 4 (id=930): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000100)=""/223, 0x0, 0xdf, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, r3, 0x1, 0x5}, 0x50) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r5, &(0x7f00000001c0)='N', 0x1, 0x80, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a06030000002300"/49], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000000000"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 2m24.942641746s ago: executing program 4 (id=933): ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000001000)=[{{&(0x7f0000000040)=@l2tp={0x2, 0x0, @remote}, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/53}]}, 0x3ff}, {{&(0x7f00000001c0)=@tipc=@id, 0x0, &(0x7f0000000940)=[{&(0x7f0000000280)=""/41}, {&(0x7f0000000400)=""/160}, {&(0x7f0000000340)=""/62}, {&(0x7f00000004c0)=""/73}, {&(0x7f0000000600)=""/201}, {&(0x7f0000000540)=""/15}, {&(0x7f0000000580)=""/1}, {&(0x7f0000000700)=""/189}, {&(0x7f00000007c0)=""/168}, {&(0x7f0000000880)=""/145}], 0x0, &(0x7f0000000a00)=""/146}, 0x4}, {{&(0x7f0000000ac0)=@isdn, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000b40)=""/26}, {&(0x7f0000000b80)=""/232}, {&(0x7f0000000c80)=""/88}, {&(0x7f0000000d00)=""/46}, {&(0x7f0000000d40)=""/224}, {&(0x7f0000000e40)=""/111}], 0x0, &(0x7f0000000f40)=""/168}}], 0xde0fddea64781a, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 2m8.861175766s ago: executing program 33 (id=933): ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000001000)=[{{&(0x7f0000000040)=@l2tp={0x2, 0x0, @remote}, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/53}]}, 0x3ff}, {{&(0x7f00000001c0)=@tipc=@id, 0x0, &(0x7f0000000940)=[{&(0x7f0000000280)=""/41}, {&(0x7f0000000400)=""/160}, {&(0x7f0000000340)=""/62}, {&(0x7f00000004c0)=""/73}, {&(0x7f0000000600)=""/201}, {&(0x7f0000000540)=""/15}, {&(0x7f0000000580)=""/1}, {&(0x7f0000000700)=""/189}, {&(0x7f00000007c0)=""/168}, {&(0x7f0000000880)=""/145}], 0x0, &(0x7f0000000a00)=""/146}, 0x4}, {{&(0x7f0000000ac0)=@isdn, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000b40)=""/26}, {&(0x7f0000000b80)=""/232}, {&(0x7f0000000c80)=""/88}, {&(0x7f0000000d00)=""/46}, {&(0x7f0000000d40)=""/224}, {&(0x7f0000000e40)=""/111}], 0x0, &(0x7f0000000f40)=""/168}}], 0xde0fddea64781a, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 1m30.475118756s ago: executing program 5 (id=1010): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x1, 0x100) epoll_create1(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f00000005c0)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x0, 0x0, 0x0, 0x65, 0x4}}}}}, 0x0) 1m25.970201782s ago: executing program 5 (id=1016): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) read$FUSE(0xffffffffffffffff, &(0x7f0000004180)={0x2020}, 0x2020) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) sendmsg$unix(r2, &(0x7f00000007c0)={&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x10}}, @rights={{0x10}}], 0x48, 0x200488c0}, 0x20040010) 1m23.865225428s ago: executing program 5 (id=1020): openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/../file0\x00', 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r2, 0x2, 0x1) getdents64(r2, 0xffffffffffffffff, 0x43) 1m19.159454004s ago: executing program 5 (id=1023): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') pread64(r3, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 1m17.879662085s ago: executing program 5 (id=1025): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8000, '\x00', @string=&(0x7f0000000200)=0x7d}}) 1m16.604785317s ago: executing program 5 (id=1028): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x2}}]}}]}, 0x48}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m1.322083008s ago: executing program 34 (id=1028): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x2}}]}}]}, 0x48}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 18.199911094s ago: executing program 2 (id=1091): socket$nl_route(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) add_key$keyring(&(0x7f0000000200), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000340)=ANY=[], 0x2a, 0x0) r1 = add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) keyctl$read(0xb, r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x12) mount$cgroup2(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x18000, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='acl,fsc=u']) 17.265940921s ago: executing program 2 (id=1093): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syncfs(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) fchdir(r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) getdents64(r4, &(0x7f0000000380)=""/4091, 0xff3a) 13.496454864s ago: executing program 1 (id=1098): openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) fsopen(&(0x7f00000000c0)='gfs2\x00', 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0xc8c9, 0x4002, 0x5e51, 0xfffffffffffffffe, 0x7}, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0xdfe5) 13.41355981s ago: executing program 2 (id=1099): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x240008c4) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x15, 0x3, 'lblc\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40086610, 0x0) 11.793803123s ago: executing program 2 (id=1100): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000000)=@fragment={0x3b, 0x0, 0x1, 0x0, 0x0, 0x6, 0x68}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @private0}, &(0x7f00000001c0)=0x20) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) 11.341762686s ago: executing program 1 (id=1102): creat(0x0, 0xecf86c37d53049cc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xff0a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, 0x0) connect$can_bcm(r3, &(0x7f0000000040), 0x10) io_submit(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x141301) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, 0x0) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 10.116319594s ago: executing program 1 (id=1103): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'ni_labpc\x00', [0x4f27, 0x400, 0x2, 0x401, 0x5044de12, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0xd8a, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x0, 0xcaf, 0xffffeadb, 0x3, 0x7c, 0x8, 0x4, 0x8000000, 0xdffffffa]}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 8.46811854s ago: executing program 1 (id=1105): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x40, 0x10, 0x1, "ba"}, 0x0, 0x0, 0x0, 0x0}) 8.226602457s ago: executing program 3 (id=1106): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 6.623483454s ago: executing program 3 (id=1107): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="370200007d02000005"], 0xe9) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[], 0x78) close(r4) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)=@filename='\x00', &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='ubifs\x00', 0x0, 0x0) 5.286398923s ago: executing program 3 (id=1108): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r3], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x4, r5, 0x1, 0x7}, 0x14) 4.414826559s ago: executing program 3 (id=1109): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000300)={&(0x7f00000001c0)}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod(&(0x7f0000000100)='./file0\x00', 0x8001420, 0x1) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) 4.09067173s ago: executing program 2 (id=1110): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_io_uring_setup(0x9e, &(0x7f00000003c0)={0x0, 0x105cc6, 0x8, 0x7, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socket(0x28, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a32000000002800048008000240000000000800014000000005060003007665746831496d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001400000000514000000110001000000000000"], 0xe8}}, 0x0) 2.947486997s ago: executing program 1 (id=1111): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x20000041) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) listen(r4, 0x80000001) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 2.755504064s ago: executing program 3 (id=1112): r0 = gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r2, &(0x7f0000001b40)={0x2020}, 0x205c) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(0xffffffffffffffff, 0x2800) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 225.510089ms ago: executing program 1 (id=1113): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x20, 0x1) socket$isdn(0x22, 0x3, 0x11) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000041c0)="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", 0x2000, 0x0) r4 = syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="200e00000000a0dc4d663b"], 0x0, 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f00000001c0)="f22e268f426df30fc7f96626dcdf66baf80cb8f426338aef66bafc0c66ed0f79a9b6000000b9800000c00f3235002000000f300f206466bad104b0faee0f01c8b9a80800000f32", 0x47}], 0x1, 0x30, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 212.00633ms ago: executing program 2 (id=1114): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) waitid(0x0, r4, 0x0, 0x8, 0x0) waitid(0x1, r4, 0x0, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) r5 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140), 0x80) keyctl$revoke(0x3, r5) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x400000002, 0x0) 0s ago: executing program 3 (id=1115): r0 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000001600), 0x0, 0x4004095, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x4, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x10da) kernel console output (not intermixed with test programs): .488197][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.488210][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.488229][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.745304][ T5846] team0: Port device team_slave_1 added [ 97.746770][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.746785][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.746824][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.903811][ T5849] team0: Port device team_slave_0 added [ 98.001790][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.001806][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.001825][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.003713][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.003728][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.003756][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.006848][ T5849] team0: Port device team_slave_1 added [ 98.136766][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.136783][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.136811][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.138519][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.138539][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.138564][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.284377][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.284394][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.284422][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.394318][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.394331][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.394349][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.475215][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.475230][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.475249][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.626133][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.626151][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.626178][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.720411][ T5840] Bluetooth: hci0: command tx timeout [ 98.813439][ T5835] hsr_slave_0: entered promiscuous mode [ 98.814962][ T5835] hsr_slave_1: entered promiscuous mode [ 98.880716][ T5840] Bluetooth: hci2: command tx timeout [ 98.880750][ T5840] Bluetooth: hci1: command tx timeout [ 98.960461][ T59] Bluetooth: hci3: command tx timeout [ 99.040776][ T59] Bluetooth: hci4: command tx timeout [ 99.097750][ T5842] hsr_slave_0: entered promiscuous mode [ 99.098770][ T5842] hsr_slave_1: entered promiscuous mode [ 99.099514][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 99.099602][ T5842] Cannot create hsr debugfs directory [ 99.133222][ T5836] hsr_slave_0: entered promiscuous mode [ 99.134661][ T5836] hsr_slave_1: entered promiscuous mode [ 99.135687][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 99.135710][ T5836] Cannot create hsr debugfs directory [ 99.380717][ T5846] hsr_slave_0: entered promiscuous mode [ 99.382169][ T5846] hsr_slave_1: entered promiscuous mode [ 99.383182][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 99.383208][ T5846] Cannot create hsr debugfs directory [ 99.701680][ T5849] hsr_slave_0: entered promiscuous mode [ 99.703172][ T5849] hsr_slave_1: entered promiscuous mode [ 99.704259][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 99.704282][ T5849] Cannot create hsr debugfs directory [ 100.800468][ T59] Bluetooth: hci0: command tx timeout [ 100.962800][ T59] Bluetooth: hci1: command tx timeout [ 100.962833][ T59] Bluetooth: hci2: command tx timeout [ 101.055709][ T5840] Bluetooth: hci3: command tx timeout [ 101.121350][ T5840] Bluetooth: hci4: command tx timeout [ 101.314929][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.345768][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.378274][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.439289][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.578172][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.618665][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.638370][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.705871][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.875156][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.923450][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.958462][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.007503][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.175558][ T5846] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.249762][ T5846] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.306497][ T5846] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.375468][ T5846] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.521826][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.553009][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.602742][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.638302][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.697186][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.783598][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.838217][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.838872][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.885584][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.907770][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.907931][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.018294][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.075550][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.075997][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.098064][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.129069][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.129228][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.224752][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.251790][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.293783][ T1022] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.294033][ T1022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.359379][ T4829] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.359785][ T4829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.482680][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.526210][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.572548][ T4829] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.572851][ T4829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.663815][ T4829] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.664033][ T4829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.742131][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.796487][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.796788][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.856462][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.873321][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.873474][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.246751][ T5835] veth0_vlan: entered promiscuous mode [ 104.286930][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.327457][ T5835] veth1_vlan: entered promiscuous mode [ 104.634555][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.635362][ T5835] veth0_macvtap: entered promiscuous mode [ 104.662291][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.736252][ T5835] veth1_macvtap: entered promiscuous mode [ 104.761600][ T5842] veth0_vlan: entered promiscuous mode [ 104.823957][ T5842] veth1_vlan: entered promiscuous mode [ 104.858836][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.916107][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.989400][ T3544] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.013391][ T3544] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.019666][ T3544] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.058251][ T3544] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.101085][ T5836] veth0_vlan: entered promiscuous mode [ 105.163973][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.208816][ T5842] veth0_macvtap: entered promiscuous mode [ 105.239378][ T5836] veth1_vlan: entered promiscuous mode [ 105.312432][ T5842] veth1_macvtap: entered promiscuous mode [ 105.456115][ T3544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.456142][ T3544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.464553][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.517947][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.627411][ T982] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.642658][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.642685][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.660028][ T982] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.681851][ T5836] veth0_macvtap: entered promiscuous mode [ 105.684335][ T982] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.694955][ T5846] veth0_vlan: entered promiscuous mode [ 105.720047][ T982] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.747840][ T5836] veth1_macvtap: entered promiscuous mode [ 105.757032][ T5849] veth0_vlan: entered promiscuous mode [ 105.806575][ T5846] veth1_vlan: entered promiscuous mode [ 106.017051][ T5849] veth1_vlan: entered promiscuous mode [ 106.081651][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.159994][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.216595][ T4829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.216622][ T4829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.269801][ T3544] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.293637][ T3544] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.315128][ T3544] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.363141][ T3544] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.658125][ T5956] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 107.366367][ T5846] veth0_macvtap: entered promiscuous mode [ 107.370051][ T1022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.370070][ T1022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.621017][ T5846] veth1_macvtap: entered promiscuous mode [ 107.702531][ T5849] veth0_macvtap: entered promiscuous mode [ 108.170378][ T5849] veth1_macvtap: entered promiscuous mode [ 108.303988][ T5963] netlink: 'syz.1.6': attribute type 10 has an invalid length. [ 108.462167][ T5961] loop7: detected capacity change from 0 to 16384 [ 108.536943][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 108.562032][ T5963] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.569002][ T5963] bond0: (slave team0): Enslaving as an active interface with an up link [ 108.743073][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.798328][ T982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.798349][ T982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.840130][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.850184][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.994775][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.608786][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.620572][ T1119] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.669955][ T1119] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.706105][ T1119] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.996612][ T1119] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.050318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.050383][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.050423][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.050463][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.050502][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.050541][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.050581][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.050621][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.830860][ T1119] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.831779][ T1119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.831794][ T1119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.922156][ T982] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.961952][ T982] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.089603][ T982] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.131800][ C0] vkms_vblank_simulate: vblank timer overrun [ 113.514852][ T5985] Zero length message leads to an empty skb [ 114.082735][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.457802][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.916332][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.953011][ C0] vkms_vblank_simulate: vblank timer overrun [ 117.354387][ C0] vkms_vblank_simulate: vblank timer overrun [ 117.957075][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.061366][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.159849][ C0] vkms_vblank_simulate: vblank timer overrun [ 119.194911][ T6003] netlink: 'syz.1.11': attribute type 10 has an invalid length. [ 119.194997][ T6003] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11'. [ 119.761663][ T6003] batman_adv: batadv0: Adding interface: vlan1 [ 119.761691][ T6003] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.761736][ T6003] batman_adv: batadv0: Interface activated: vlan1 [ 120.748954][ T5978] Set syz1 is full, maxelem 65536 reached [ 121.909112][ T5910] IPVS: starting estimator thread 0... [ 122.022087][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.022109][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.049244][ T6010] IPVS: using max 7 ests per chain, 16800 per kthread [ 122.359384][ T6007] /dev/nullb0: Can't open blockdev [ 122.744657][ T6019] ======================================================= [ 122.744657][ T6019] WARNING: The mand mount option has been deprecated and [ 122.744657][ T6019] and is ignored by this kernel. Remove the mand [ 122.744657][ T6019] option from the mount to silence this warning. [ 122.744657][ T6019] ======================================================= [ 122.894474][ T6021] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 126.516862][ T3577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.516883][ T3577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.569813][ T3599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.569847][ T3599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.849139][ T3577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.849161][ T3577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.549524][ T6055] TCP: TCP_TX_DELAY enabled [ 129.565454][ T6055] program syz.1.19 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.981838][ T6055] syz.1.19 (6055) used greatest stack depth: 18456 bytes left [ 135.956646][ T6093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23'. [ 138.407825][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.409687][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.450110][ T6119] Bluetooth: MGMT ver 1.23 [ 147.299273][ T6136] usb usb1: check_ctrlrecip: process 6136 (syz.4.35) requesting ep 01 but needs 81 [ 149.271619][ T6150] overlayfs: missing 'lowerdir' [ 152.202951][ T6173] warning: `syz.3.44' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 152.697370][ T6181] block nbd1: Attempted send on invalid socket [ 152.697456][ T6181] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 152.697636][ T6181] EXT4-fs (nbd1): unable to read superblock [ 153.132777][ T6184] No control pipe specified [ 154.299274][ T6187] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 154.314354][ T6187] netlink: 'syz.4.46': attribute type 16 has an invalid length. [ 154.829070][ T6179] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.852715][ T6179] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.143842][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 156.146497][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 156.172639][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 156.188778][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 156.200021][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 156.575532][ C0] vkms_vblank_simulate: vblank timer overrun [ 156.719444][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.58'. [ 157.327488][ C0] vkms_vblank_simulate: vblank timer overrun [ 157.502006][ C0] vkms_vblank_simulate: vblank timer overrun [ 157.595217][ T6242] snd_dummy snd_dummy.0: control 3:4:-2:syz0:2147483647 is already present [ 157.596155][ T6242] autofs: Bad value for 'fd' [ 157.610344][ C0] vkms_vblank_simulate: vblank timer overrun [ 157.865213][ T6241] syz.2.65 (6241) used greatest stack depth: 16216 bytes left [ 157.871899][ C0] vkms_vblank_simulate: vblank timer overrun [ 158.130320][ T6248] capability: warning: `syz.4.70' uses 32-bit capabilities (legacy support in use) [ 158.136884][ T6247] Smack: duplicate mount options [ 158.443380][ T5840] Bluetooth: hci5: command tx timeout [ 158.542720][ T6254] capability: warning: `syz.3.71' uses deprecated v2 capabilities in a way that may be insecure [ 159.283597][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.637486][ C0] vkms_vblank_simulate: vblank timer overrun [ 160.326611][ T6262] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.480386][ T5840] Bluetooth: hci5: command tx timeout [ 160.575649][ T6272] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 162.011826][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.090726][ T6298] netlink: 'syz.3.91': attribute type 1 has an invalid length. [ 162.097081][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.362116][ T67] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.662118][ T5840] Bluetooth: hci5: command tx timeout [ 162.911648][ T6318] input input7: cannot allocate more than FF_MAX_EFFECTS effects [ 163.434144][ C0] vkms_vblank_simulate: vblank timer overrun [ 163.950942][ T6326] input input8: cannot allocate more than FF_MAX_EFFECTS effects [ 164.340707][ T38] audit: type=1326 audit(1756069702.698:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6337 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85322febe9 code=0x7ffc0000 [ 164.340764][ T38] audit: type=1326 audit(1756069702.698:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6337 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85322febe9 code=0x7ffc0000 [ 164.459177][ T38] audit: type=1326 audit(1756069702.808:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6337 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f85322febe9 code=0x7ffc0000 [ 164.459559][ T38] audit: type=1326 audit(1756069702.818:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6337 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85322febe9 code=0x7ffc0000 [ 164.530387][ T38] audit: type=1326 audit(1756069702.818:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6337 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85322febe9 code=0x7ffc0000 [ 164.686646][ T67] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.863150][ T5840] Bluetooth: hci5: command tx timeout [ 166.264728][ T67] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.297547][ T6365] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 166.297576][ T6365] CIFS mount error: No usable UNC path provided in device string! [ 166.297576][ T6365] [ 166.297775][ T6365] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 166.499184][ T6215] chnl_net:caif_netlink_parms(): no params data found [ 167.007375][ T67] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.210894][ T6381] caif0: entered allmulticast mode [ 167.784985][ T6404] netlink: 'syz.4.131': attribute type 6 has an invalid length. [ 167.964077][ T6409] netlink: 104 bytes leftover after parsing attributes in process `syz.1.133'. [ 169.265000][ T6215] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.265156][ T6215] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.265396][ T6215] bridge_slave_0: entered allmulticast mode [ 169.279229][ T6215] bridge_slave_0: entered promiscuous mode [ 169.443603][ T6215] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.443769][ T6215] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.444016][ T6215] bridge_slave_1: entered allmulticast mode [ 169.492678][ T6215] bridge_slave_1: entered promiscuous mode [ 171.209219][ T6215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.363695][ T6215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.161457][ T67] bridge_slave_1: left allmulticast mode [ 172.162017][ T67] bridge_slave_1: left promiscuous mode [ 172.164585][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.419018][ T67] bridge_slave_0: left allmulticast mode [ 173.419054][ T67] bridge_slave_0: left promiscuous mode [ 173.419331][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.442580][ T6501] input input10: cannot allocate more than FF_MAX_EFFECTS effects [ 174.925798][ C0] vkms_vblank_simulate: vblank timer overrun [ 174.928727][ T6498] could not allocate digest TFM handle sha1-ssse3 [ 175.042629][ T6507] usb usb1: usbfs: process 6507 (syz.2.173) did not claim interface 0 before use [ 175.140671][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.240859][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.318915][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.335226][ T67] bond0 (unregistering): Released all slaves [ 177.397712][ T6215] team0: Port device team_slave_0 added [ 177.434188][ T6215] team0: Port device team_slave_1 added [ 177.571892][ T6531] devtmpfs: Too few inodes for current use [ 178.387292][ T6542] input input11: cannot allocate more than FF_MAX_EFFECTS effects [ 178.470853][ T6536] netlink: 32 bytes leftover after parsing attributes in process `syz.1.186'. [ 179.623862][ T6215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.623881][ T6215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.623910][ T6215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.691029][ T6568] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 179.697756][ T6215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.697773][ T6215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.697800][ T6215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.565492][ T6610] input input12: cannot allocate more than FF_MAX_EFFECTS effects [ 184.583043][ T6215] hsr_slave_0: entered promiscuous mode [ 184.585735][ T6215] hsr_slave_1: entered promiscuous mode [ 184.604147][ T6215] debugfs: 'hsr0' already exists in 'hsr' [ 184.604176][ T6215] Cannot create hsr debugfs directory [ 185.052325][ T67] hsr_slave_0: left promiscuous mode [ 185.131281][ T67] hsr_slave_1: left promiscuous mode [ 185.132408][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.132495][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.299045][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.299080][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.806815][ T67] veth1_macvtap: left promiscuous mode [ 185.806995][ T67] veth0_macvtap: left promiscuous mode [ 185.807219][ T67] veth1_vlan: left promiscuous mode [ 185.807439][ T67] veth0_vlan: left promiscuous mode [ 185.891419][ T6648] block nbd2: Attempted send on invalid socket [ 185.891442][ T6648] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 185.891544][ T6648] EXT4-fs (nbd2): unable to read superblock [ 186.123478][ T6649] No control pipe specified [ 189.425370][ T6692] block nbd4: Attempted send on invalid socket [ 189.425471][ T6692] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 189.428372][ T6692] EXT4-fs (nbd4): unable to read superblock [ 189.557783][ T6693] No control pipe specified [ 191.204043][ T45] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 191.380368][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 191.403769][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.403802][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.403843][ T45] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 191.403866][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.445241][ T45] usb 5-1: config 0 descriptor?? [ 191.917822][ T45] greenasia 0003:0E8F:0012.0001: item fetching failed at offset 0/3 [ 191.937489][ T45] greenasia 0003:0E8F:0012.0001: parse failed [ 191.937569][ T45] greenasia 0003:0E8F:0012.0001: probe with driver greenasia failed with error -22 [ 192.099185][ T31] usb 5-1: USB disconnect, device number 2 [ 192.882042][ T67] team0 (unregistering): Port device team_slave_1 removed [ 193.137728][ T67] team0 (unregistering): Port device team_slave_0 removed [ 195.390465][ T6709] netlink: 20 bytes leftover after parsing attributes in process `syz.1.253'. [ 195.967250][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.259'. [ 196.251262][ T6728] block nbd3: Attempted send on invalid socket [ 196.251353][ T6728] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 196.252195][ T6728] EXT4-fs (nbd3): unable to read superblock [ 196.393824][ T6729] No control pipe specified [ 197.656859][ T6745] "syz.2.262" (6745) uses obsolete ecb(arc4) skcipher [ 197.659632][ T6752] usb usb8: usbfs: process 6752 (syz.4.263) did not claim interface 0 before use [ 198.170490][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 198.250359][ T6059] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 198.330371][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 198.334432][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 198.336678][ T31] usb 3-1: config 8 has an invalid interface number: 187 but max is 0 [ 198.336702][ T31] usb 3-1: config 8 has no interface number 0 [ 198.336751][ T31] usb 3-1: config 8 interface 187 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 1023 [ 198.336775][ T31] usb 3-1: config 8 interface 187 altsetting 7 bulk endpoint 0xC has invalid maxpacket 16 [ 198.336800][ T31] usb 3-1: config 8 interface 187 has no altsetting 0 [ 198.409919][ T6215] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 198.424854][ T31] usb 3-1: string descriptor 0 read error: -22 [ 198.425021][ T31] usb 3-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=f2.91 [ 198.425045][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.442490][ T6059] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 198.442530][ T6059] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.442551][ T6059] usb 4-1: Product: syz [ 198.442566][ T6059] usb 4-1: Manufacturer: syz [ 198.442580][ T6059] usb 4-1: SerialNumber: syz [ 198.501806][ T6758] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 198.502447][ T6758] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 198.504389][ T6059] usb 4-1: config 0 descriptor?? [ 198.507023][ T31] kvaser_usb 3-1:8.187: error -ENODEV: Cannot get usb endpoint(s) [ 198.584207][ T6215] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 198.689621][ T6215] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 198.774561][ T6152] usb 3-1: USB disconnect, device number 2 [ 198.840989][ T6164] usb 4-1: USB disconnect, device number 2 [ 198.848724][ T6215] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 198.858749][ T6776] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 199.448916][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.448996][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.514403][ T6215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.517653][ T6789] sctp: [Deprecated]: syz.1.273 (pid 6789) Use of int in max_burst socket option. [ 199.517653][ T6789] Use struct sctp_assoc_value instead [ 199.621023][ T6215] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.675373][ T3599] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.675557][ T3599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.760087][ T6011] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.760381][ T6011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.983072][ T6830] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 201.045548][ T6830] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 201.203661][ T6215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.300544][ T6164] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 201.470351][ T6164] usb 2-1: Using ep0 maxpacket: 8 [ 201.472828][ T6164] usb 2-1: config 3 has an invalid interface number: 45 but max is 0 [ 201.472854][ T6164] usb 2-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 201.472873][ T6164] usb 2-1: config 3 has no interface number 0 [ 201.472945][ T6164] usb 2-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.472972][ T6164] usb 2-1: config 3 interface 45 has no altsetting 0 [ 201.476335][ T6164] usb 2-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 201.476363][ T6164] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.476384][ T6164] usb 2-1: Product: syz [ 201.476398][ T6164] usb 2-1: Manufacturer: syz [ 201.476413][ T6164] usb 2-1: SerialNumber: syz [ 202.255719][ T6164] usb 2-1: USB disconnect, device number 2 [ 202.277951][ T6857] netlink: set zone limit has 4 unknown bytes [ 202.532760][ T5902] udevd[5902]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 202.607795][ T6215] veth0_vlan: entered promiscuous mode [ 202.717900][ T6215] veth1_vlan: entered promiscuous mode [ 202.920474][ T6215] veth0_macvtap: entered promiscuous mode [ 202.945177][ T6215] veth1_macvtap: entered promiscuous mode [ 203.545859][ T6883] input input13: cannot allocate more than FF_MAX_EFFECTS effects [ 204.078784][ T6215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.167667][ T6215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.266546][ T6132] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.267917][ T3599] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.268437][ T3599] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.269015][ T3599] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.250076][ T3544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.250098][ T3544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.453845][ T982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.453864][ T982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.050120][ T6926] overlayfs: missing 'lowerdir' [ 207.228684][ T6933] fuse: Bad value for 'rootmode' [ 208.123759][ T6951] program syz.4.320 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.804067][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 208.950327][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 208.964606][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 208.981758][ T9] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 208.981789][ T9] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 208.981810][ T9] usb 2-1: Product: syz [ 208.981824][ T9] usb 2-1: Manufacturer: syz [ 208.981838][ T9] usb 2-1: SerialNumber: syz [ 209.106088][ T9] usb 2-1: config 0 descriptor?? [ 209.108523][ T6963] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 209.132114][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 209.132154][ T9] hub 2-1:0.0: probe with driver hub failed with error -5 [ 209.342628][ T9] usb 2-1: USB disconnect, device number 3 [ 209.719507][ T6982] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 209.737456][ T6982] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 210.291774][ T6993] netlink: 'syz.3.334': attribute type 13 has an invalid length. [ 210.291796][ T6993] netlink: 'syz.3.334': attribute type 17 has an invalid length. [ 210.690444][ T6993] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 210.861588][ T7005] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.864081][ T7005] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.094147][ T7012] netlink: 104 bytes leftover after parsing attributes in process `syz.3.342'. [ 211.689120][ T7027] netlink: 28 bytes leftover after parsing attributes in process `syz.5.348'. [ 211.980252][ T38] audit: type=1326 audit(1756069750.328:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7034 comm="syz.1.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85322febe9 code=0x7ffc0000 [ 211.980313][ T38] audit: type=1326 audit(1756069750.338:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7034 comm="syz.1.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85322febe9 code=0x7ffc0000 [ 212.038774][ T38] audit: type=1326 audit(1756069750.348:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7034 comm="syz.1.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f85322febe9 code=0x7ffc0000 [ 212.038838][ T38] audit: type=1326 audit(1756069750.398:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7034 comm="syz.1.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85322febe9 code=0x7ffc0000 [ 212.038887][ T38] audit: type=1326 audit(1756069750.398:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7034 comm="syz.1.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85322febe9 code=0x7ffc0000 [ 212.059603][ T38] audit: type=1326 audit(1756069750.418:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7034 comm="syz.1.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f85322febe9 code=0x7ffc0000 [ 212.059666][ T38] audit: type=1326 audit(1756069750.418:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7034 comm="syz.1.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85322febe9 code=0x7ffc0000 [ 212.762108][ T7060] netlink: 96 bytes leftover after parsing attributes in process `syz.4.362'. [ 212.762336][ T7060] netlink: 15 bytes leftover after parsing attributes in process `syz.4.362'. [ 212.830123][ T7061] netlink: 48 bytes leftover after parsing attributes in process `syz.5.361'. [ 212.863656][ T7062] netlink: 96 bytes leftover after parsing attributes in process `syz.1.360'. [ 214.109020][ C1] vkms_vblank_simulate: vblank timer overrun [ 214.297330][ T7095] input input14: cannot allocate more than FF_MAX_EFFECTS effects [ 214.303974][ C1] vkms_vblank_simulate: vblank timer overrun [ 214.851568][ C1] vkms_vblank_simulate: vblank timer overrun [ 214.908203][ C1] vkms_vblank_simulate: vblank timer overrun [ 215.131364][ T7078] program syz.2.370 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.318606][ T7131] netlink: 'syz.5.392': attribute type 3 has an invalid length. [ 216.318627][ T7131] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.392'. [ 217.042084][ T7097] Bluetooth: hci1: command 0x0406 tx timeout [ 217.042216][ T7097] Bluetooth: hci0: command 0x0406 tx timeout [ 217.042242][ T7097] Bluetooth: hci3: command 0x0406 tx timeout [ 217.134584][ T7147] netlink: 'syz.3.398': attribute type 21 has an invalid length. [ 217.134606][ T7147] netlink: 'syz.3.398': attribute type 1 has an invalid length. [ 217.134618][ T7147] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.398'. [ 217.200641][ T59] Bluetooth: hci2: command 0x0406 tx timeout [ 217.245998][ T7150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.400'. [ 217.246023][ T7150] netlink: 16 bytes leftover after parsing attributes in process `syz.3.400'. [ 217.579947][ T7161] netlink: 28 bytes leftover after parsing attributes in process `syz.3.403'. [ 217.579975][ T7161] netlink: 28 bytes leftover after parsing attributes in process `syz.3.403'. [ 218.362609][ T7184] netlink: 104 bytes leftover after parsing attributes in process `syz.4.414'. [ 218.974215][ T7197] input input15: cannot allocate more than FF_MAX_EFFECTS effects [ 219.961330][ T7200] input input16: cannot allocate more than FF_MAX_EFFECTS effects [ 220.456277][ T7202] syz.1.421 uses obsolete (PF_INET,SOCK_PACKET) [ 221.397110][ T7218] input input17: cannot allocate more than FF_MAX_EFFECTS effects [ 222.357849][ T7213] netlink: 96 bytes leftover after parsing attributes in process `syz.5.420'. [ 222.606866][ T7233] vlan2: entered promiscuous mode [ 222.607470][ T7233] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 222.608601][ T7233] vlan2: entered allmulticast mode [ 222.608623][ T7233] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 222.648187][ T7233] team0: Device vlan2 is up. Set it down before adding it as a team port [ 223.962967][ T7243] input input18: cannot allocate more than FF_MAX_EFFECTS effects [ 224.239540][ T5837] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 224.239593][ T5837] CPU: 1 UID: 0 PID: 5837 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 224.239620][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 224.239634][ T5837] Workqueue: hci2 hci_rx_work [ 224.239678][ T5837] Call Trace: [ 224.239687][ T5837] [ 224.239696][ T5837] dump_stack_lvl+0x189/0x250 [ 224.239737][ T5837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.239771][ T5837] ? __pfx__printk+0x10/0x10 [ 224.239801][ T5837] ? kernfs_path_from_node+0x2c/0x280 [ 224.239829][ T5837] ? kernfs_path_from_node+0x243/0x280 [ 224.239848][ T5837] ? kernfs_path_from_node+0x2c/0x280 [ 224.239874][ T5837] sysfs_create_dir_ns+0x259/0x280 [ 224.239909][ T5837] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 224.239934][ T5837] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 224.239968][ T5837] ? rt_spin_unlock+0x65/0x80 [ 224.239997][ T5837] kobject_add_internal+0x5a5/0xb50 [ 224.240040][ T5837] kobject_add+0x155/0x220 [ 224.240078][ T5837] ? __pfx_kobject_add+0x10/0x10 [ 224.240117][ T5837] ? get_device_parent+0x370/0x3a0 [ 224.240156][ T5837] device_add+0x408/0xb50 [ 224.240196][ T5837] hci_conn_add_sysfs+0xd5/0x1e0 [ 224.240234][ T5837] le_conn_complete_evt+0xc3a/0x1220 [ 224.240276][ T5837] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 224.240305][ T5837] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 224.240333][ T5837] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.240365][ T5837] ? skb_pull_data+0xfb/0x200 [ 224.240391][ T5837] hci_le_enh_conn_complete_evt+0x189/0x470 [ 224.240419][ T5837] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 224.240451][ T5837] hci_event_packet+0x78f/0x1200 [ 224.240491][ T5837] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 224.240519][ T5837] ? __pfx_hci_event_packet+0x10/0x10 [ 224.240552][ T5837] ? __pfx_migrate_enable+0x10/0x10 [ 224.240590][ T5837] ? hci_send_to_monitor+0xe2/0x570 [ 224.240623][ T5837] hci_rx_work+0x46a/0xe80 [ 224.240654][ T5837] ? process_scheduled_works+0x9ef/0x17b0 [ 224.240687][ T5837] process_scheduled_works+0xade/0x17b0 [ 224.240751][ T5837] ? __pfx_process_scheduled_works+0x10/0x10 [ 224.240801][ T5837] worker_thread+0x8a0/0xda0 [ 224.240869][ T5837] kthread+0x711/0x8a0 [ 224.240907][ T5837] ? __pfx_worker_thread+0x10/0x10 [ 224.240935][ T5837] ? __pfx_kthread+0x10/0x10 [ 224.240976][ T5837] ? __pfx_kthread+0x10/0x10 [ 224.241012][ T5837] ret_from_fork+0x3fc/0x770 [ 224.241045][ T5837] ? __pfx_ret_from_fork+0x10/0x10 [ 224.241082][ T5837] ? __switch_to_asm+0x39/0x70 [ 224.241102][ T5837] ? __switch_to_asm+0x33/0x70 [ 224.241122][ T5837] ? __pfx_kthread+0x10/0x10 [ 224.241157][ T5837] ret_from_fork_asm+0x1a/0x30 [ 224.241199][ T5837] [ 224.242943][ T5837] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 224.242995][ T5837] Bluetooth: hci2: failed to register connection device [ 224.525238][ T9] kernel write not supported for file /262/clear_refs (pid: 9 comm: kworker/0:0) [ 224.780358][ T6164] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 224.923520][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 224.933027][ T6164] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.933065][ T6164] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.933092][ T6164] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 224.933142][ T6164] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 224.933169][ T6164] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.955656][ T6164] usb 5-1: config 0 descriptor?? [ 225.104282][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.104377][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.104417][ T9] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 225.104441][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.302862][ T9] usb 4-1: config 0 descriptor?? [ 225.837495][ T6164] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 225.986926][ T6164] usb 5-1: USB disconnect, device number 3 [ 226.197201][ T9] uclogic 0003:256C:006D.0003: failed retrieving Huion firmware version: -71 [ 226.197263][ T9] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 226.197386][ T9] uclogic 0003:256C:006D.0003: probe with driver uclogic failed with error -71 [ 226.373859][ T9] usb 4-1: USB disconnect, device number 3 [ 226.450505][ T7275] fido_id[7275]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 226.970515][ T7293] input input19: cannot allocate more than FF_MAX_EFFECTS effects [ 227.890339][ T6152] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 228.040359][ T6152] usb 4-1: Using ep0 maxpacket: 8 [ 228.044262][ T6152] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 228.044334][ T6152] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 228.044357][ T6152] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 228.044382][ T6152] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 228.044406][ T6152] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.044457][ T6152] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 228.044478][ T6152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.213454][ T7309] input input20: cannot allocate more than FF_MAX_EFFECTS effects [ 229.205451][ T7313] Driver unsupported XDP return value 0 on prog (id 88) dev N/A, expect packet loss! [ 229.294838][ T6152] usb 4-1: usb_control_msg returned -32 [ 229.294888][ T6152] usbtmc 4-1:16.0: can't read capabilities [ 229.674823][ T7328] usbtmc 4-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 229.736873][ T7330] process 'syz.5.458' launched './file0' with NULL argv: empty string added [ 229.751201][ T5901] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 229.881565][ T31] usb 4-1: USB disconnect, device number 4 [ 229.941874][ T5901] usb 2-1: Using ep0 maxpacket: 8 [ 229.944615][ T5901] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 229.944674][ T5901] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 229.944704][ T5901] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 229.944822][ T5901] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 229.944851][ T5901] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 229.946386][ T5901] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 229.946442][ T5901] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 229.946469][ T5901] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 229.946494][ T5901] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 229.946526][ T5901] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 229.949185][ T5901] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 229.949240][ T5901] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 229.949269][ T5901] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 229.949295][ T5901] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 229.949320][ T5901] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 230.034690][ T5901] usb 2-1: string descriptor 0 read error: -22 [ 230.034883][ T5901] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 230.034910][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.198021][ T5901] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 230.297559][ T6152] usb 2-1: USB disconnect, device number 4 [ 230.557969][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.867583][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.963628][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.572811][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.485424][ T7348] input input21: cannot allocate more than FF_MAX_EFFECTS effects [ 232.548594][ T7350] input input22: cannot allocate more than FF_MAX_EFFECTS effects [ 232.569929][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.348249][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.526837][ T7360] block nbd5: Attempted send on invalid socket [ 234.526861][ T7360] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.527052][ T7360] (syz.5.466,7360,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 234.527085][ T7360] (syz.5.466,7360,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 234.527107][ T7360] (syz.5.466,7360,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 234.527126][ T7360] (syz.5.466,7360,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 235.651197][ T7377] syzkaller1: entered promiscuous mode [ 235.651228][ T7377] syzkaller1: entered allmulticast mode [ 236.324904][ T7410] input input23: cannot allocate more than FF_MAX_EFFECTS effects [ 237.394005][ T7422] veth0_to_bridge: entered promiscuous mode [ 237.396226][ T7421] veth0_to_bridge: left promiscuous mode [ 238.460331][ T6152] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 238.613049][ T6152] usb 6-1: Using ep0 maxpacket: 8 [ 238.618156][ T6152] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 238.618183][ T6152] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 238.618208][ T6152] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 238.618231][ T6152] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.618302][ T6152] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 238.618324][ T6152] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.956067][ T6152] usb 6-1: GET_CAPABILITIES returned 0 [ 238.956153][ T6152] usbtmc 6-1:16.0: can't read capabilities [ 239.172482][ T6152] usb 6-1: USB disconnect, device number 2 [ 239.204297][ T7471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.493'. [ 239.257904][ T7434] mmap: syz.3.484 (7434) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 240.407172][ T7499] "syz.5.503" (7499) uses obsolete ecb(arc4) skcipher [ 241.010321][ T5901] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 241.143846][ T5903] kernel write not supported for file bpf-prog (pid: 5903 comm: kworker/1:4) [ 241.187050][ T5901] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.187078][ T5901] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 241.195469][ T5901] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 241.195499][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.195521][ T5901] usb 6-1: Product: syz [ 241.195536][ T5901] usb 6-1: Manufacturer: syz [ 241.195551][ T5901] usb 6-1: SerialNumber: syz [ 241.450495][ T7484] netlink: 'syz.1.496': attribute type 6 has an invalid length. [ 241.501309][ T5901] usb 6-1: 0:2 : does not exist [ 241.540800][ T5901] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 241.732023][ T5901] usb 6-1: USB disconnect, device number 3 [ 242.077794][ T5902] udevd[5902]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 242.600723][ T7535] ./file0: Can't lookup blockdev [ 242.752792][ T6152] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 242.900452][ T6152] usb 6-1: Using ep0 maxpacket: 8 [ 242.905929][ T6152] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 242.905977][ T6152] usb 6-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 242.906034][ T6152] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 242.906062][ T6152] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 242.906087][ T6152] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 242.906132][ T6152] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 242.906156][ T6152] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.013792][ T6152] usbtmc 6-1:16.0: bulk endpoints not found [ 243.074245][ T5901] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 243.222841][ T7541] input input24: cannot allocate more than FF_MAX_EFFECTS effects [ 243.726877][ T5901] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 243.726911][ T5901] usb 5-1: config 0 interface 0 has no altsetting 0 [ 243.757020][ T5901] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 243.757053][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 243.757074][ T5901] usb 5-1: Product: syz [ 243.757089][ T5901] usb 5-1: Manufacturer: syz [ 243.757105][ T5901] usb 5-1: SerialNumber: syz [ 243.854444][ T5901] usb 5-1: config 0 descriptor?? [ 243.888548][ T5901] usb 5-1: selecting invalid altsetting 0 [ 244.178932][ T5903] usb 5-1: USB disconnect, device number 4 [ 245.480715][ T5903] usb 6-1: USB disconnect, device number 4 [ 245.740332][ T6152] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 245.972002][ T7581] input input25: cannot allocate more than FF_MAX_EFFECTS effects [ 246.640390][ T6152] usb 3-1: Using ep0 maxpacket: 32 [ 246.643227][ T6152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.643259][ T6152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.643299][ T6152] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 246.643323][ T6152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.737910][ T6152] usb 3-1: config 0 descriptor?? [ 247.191825][ T7590] nbd3: detected capacity change from 0 to 4 [ 247.199502][ T6152] greenasia 0003:0E8F:0012.0004: item fetching failed at offset 0/3 [ 247.221075][ T6152] greenasia 0003:0E8F:0012.0004: parse failed [ 247.221171][ T6152] greenasia 0003:0E8F:0012.0004: probe with driver greenasia failed with error -22 [ 247.248475][ T7586] block nbd3: shutting down sockets [ 247.257648][ T6221] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.257895][ T6221] Buffer I/O error on dev nbd3, logical block 0, async page read [ 247.325263][ T63] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.325302][ T63] Buffer I/O error on dev nbd3, logical block 0, async page read [ 247.327356][ T6221] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.327384][ T6221] Buffer I/O error on dev nbd3, logical block 0, async page read [ 247.328852][ T6221] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.328879][ T6221] Buffer I/O error on dev nbd3, logical block 0, async page read [ 247.329067][ T6221] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.329092][ T6221] Buffer I/O error on dev nbd3, logical block 0, async page read [ 247.329195][ T6221] ldm_validate_partition_table(): Disk read failed. [ 247.329273][ T6221] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.329296][ T6221] Buffer I/O error on dev nbd3, logical block 0, async page read [ 247.329848][ T6221] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.329875][ T6221] Buffer I/O error on dev nbd3, logical block 0, async page read [ 247.330059][ T6221] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.330084][ T6221] Buffer I/O error on dev nbd3, logical block 0, async page read [ 247.336896][ T6221] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.336921][ T6221] Buffer I/O error on dev nbd3, logical block 0, async page read [ 247.337083][ T6221] Dev nbd3: unable to read RDB block 0 [ 247.337223][ T6221] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.337253][ T6221] Buffer I/O error on dev nbd3, logical block 0, async page read [ 247.343158][ T6221] nbd3: unable to read partition table [ 247.343461][ T6221] nbd3: partition table beyond EOD, truncated [ 247.364591][ T6221] ldm_validate_partition_table(): Disk read failed. [ 247.366575][ T6221] Dev nbd3: unable to read RDB block 0 [ 247.373279][ T6221] nbd3: unable to read partition table [ 247.373577][ T6221] nbd3: partition table beyond EOD, truncated [ 247.428619][ T5903] usb 3-1: USB disconnect, device number 3 [ 248.035673][ T7608] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 248.695716][ T7618] input input26: cannot allocate more than FF_MAX_EFFECTS effects [ 250.726850][ T7647] input input27: cannot allocate more than FF_MAX_EFFECTS effects [ 251.311998][ T7651] input input28: cannot allocate more than FF_MAX_EFFECTS effects [ 251.380351][ T5903] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 251.740290][ T5903] usb 3-1: Using ep0 maxpacket: 16 [ 251.742946][ T5903] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 251.742972][ T5903] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 251.742993][ T5903] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 251.743013][ T5903] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 251.743033][ T5903] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 251.743053][ T5903] usb 3-1: config 0 has no interface number 0 [ 251.743106][ T5903] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 251.743136][ T5903] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 251.743159][ T5903] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 251.743196][ T5903] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 251.743223][ T5903] usb 3-1: config 0 interface 125 has no altsetting 0 [ 251.743241][ T5903] usb 3-1: config 0 interface 125 has no altsetting 2 [ 251.746461][ T5903] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 251.746489][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.746510][ T5903] usb 3-1: Product: syz [ 251.746525][ T5903] usb 3-1: Manufacturer: syz [ 251.746540][ T5903] usb 3-1: SerialNumber: syz [ 251.919237][ T5903] usb 3-1: config 0 descriptor?? [ 252.010026][ T5903] usb 3-1: selecting invalid altsetting 2 [ 252.176318][ T7659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.562'. [ 252.194479][ T7659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.562'. [ 252.256229][ T7649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.257185][ T7649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.690457][ T5923] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 252.854186][ T5923] usb 4-1: Using ep0 maxpacket: 8 [ 252.860719][ T5923] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 252.860807][ T5923] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 252.860832][ T5923] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 252.860857][ T5923] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 252.860883][ T5923] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 252.860933][ T5923] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 252.860960][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.955470][ C1] usb 3-1: async_complete: urb error -71 [ 252.956840][ T5903] get_1284_register: usb error -71 [ 252.956982][ T5903] uss720 3-1:0.125: probe with driver uss720 failed with error -71 [ 252.998798][ T5903] usb 3-1: USB disconnect, device number 4 [ 253.125236][ T5923] usb 4-1: usb_control_msg returned -32 [ 253.125284][ T5923] usbtmc 4-1:16.0: can't read capabilities [ 253.432758][ T7676] input input29: cannot allocate more than FF_MAX_EFFECTS effects [ 253.782873][ T5903] usb 4-1: USB disconnect, device number 5 [ 253.822678][ T7687] trusted_key: syz.4.575 sent an empty control message without MSG_MORE. [ 253.923744][ T7690] batadv_slave_1: entered promiscuous mode [ 253.925598][ T7689] batadv_slave_1: left promiscuous mode [ 254.341105][ T38] audit: type=1326 audit(1756069792.708:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7697 comm="syz.5.580" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f38033e5ba7 code=0x0 [ 255.461557][ T7721] syzkaller1: entered promiscuous mode [ 255.461588][ T7721] syzkaller1: entered allmulticast mode [ 255.811662][ T7724] input input30: cannot allocate more than FF_MAX_EFFECTS effects [ 256.485719][ T38] audit: type=1326 audit(1756069794.838:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7731 comm="syz.5.593" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f38033eebe9 code=0x0 [ 257.471357][ T7752] netlink: 'syz.2.601': attribute type 10 has an invalid length. [ 257.584149][ T7752] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 257.588747][ T7752] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 257.995689][ T7756] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 258.025940][ T7764] input input31: cannot allocate more than FF_MAX_EFFECTS effects [ 258.026652][ T5903] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 258.180472][ T5903] usb 5-1: Using ep0 maxpacket: 32 [ 258.186730][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.186764][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.186802][ T5903] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 258.186826][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.252579][ T5903] usb 5-1: config 0 descriptor?? [ 258.353976][ T7769] syz_tun: entered allmulticast mode [ 258.439731][ T7767] syz_tun: left allmulticast mode [ 258.892006][ T5903] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 259.117951][ T5923] usb 5-1: USB disconnect, device number 5 [ 259.653906][ T7797] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4080 [ 260.020345][ T5923] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 260.204144][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.204176][ T5923] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 260.204221][ T5923] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 260.204244][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.212730][ T5923] usb 2-1: config 0 descriptor?? [ 260.570955][ T7814] input input32: cannot allocate more than FF_MAX_EFFECTS effects [ 260.891438][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.891518][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.950833][ T7820] netlink: 12 bytes leftover after parsing attributes in process `syz.4.623'. [ 261.615329][ T7825] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 261.675530][ T7825] bond1: (slave vcan1): Error -95 calling set_mac_address [ 262.292568][ T7834] netlink: 20 bytes leftover after parsing attributes in process `syz.5.629'. [ 262.430478][ T7840] netlink: 24 bytes leftover after parsing attributes in process `syz.3.632'. [ 262.724903][ T5923] usbhid 2-1:0.0: can't add hid device: -71 [ 262.725031][ T5923] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 262.765860][ T5923] usb 2-1: USB disconnect, device number 5 [ 263.376159][ T7861] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 263.451984][ T7863] input input33: cannot allocate more than FF_MAX_EFFECTS effects [ 263.546806][ T7865] syz_tun: entered allmulticast mode [ 263.662592][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.5.641'. [ 264.310393][ T7862] syz_tun: left allmulticast mode [ 266.350139][ T7902] input input34: cannot allocate more than FF_MAX_EFFECTS effects [ 267.140297][ T38] audit: type=1800 audit(1756069805.488:16): pid=7909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.656" name="bus" dev="overlay" ino=738 res=0 errno=0 [ 267.173892][ T7911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.657'. [ 269.627562][ T7948] input input35: cannot allocate more than FF_MAX_EFFECTS effects [ 270.569066][ T7966] i2c i2c-0: Invalid block read size 253 [ 272.602912][ T7994] input input36: cannot allocate more than FF_MAX_EFFECTS effects [ 273.517054][ T8015] input: syz0 as /devices/virtual/input/input37 [ 274.693622][ T8037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.700'. [ 276.268023][ T8049] fuse: Bad value for 'fd' [ 277.304419][ T59] Bluetooth: hci4: command 0x1003 tx timeout [ 277.677899][ T5837] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 279.360699][ T5925] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 280.161190][ T8068] input input38: cannot allocate more than FF_MAX_EFFECTS effects [ 280.662038][ T8071] netlink: 12 bytes leftover after parsing attributes in process `syz.5.710'. [ 280.888601][ T8073] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 280.921244][ T8073] bond1: (slave vcan1): Error -95 calling set_mac_address [ 281.897413][ T8105] input input39: cannot allocate more than FF_MAX_EFFECTS effects [ 283.440367][ T5837] Bluetooth: hci5: command 0x0406 tx timeout [ 284.417974][ T8145] input input40: cannot allocate more than FF_MAX_EFFECTS effects [ 284.565819][ T38] audit: type=1326 audit(1756069822.888:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8147 comm="syz.4.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416d5aebe9 code=0x7fc00000 [ 285.289626][ T38] audit: type=1326 audit(1756069823.628:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8147 comm="syz.4.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f416d5aebe9 code=0x7fc00000 [ 285.673950][ T8170] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 285.674185][ T8170] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 286.307019][ T8170] vhci_hcd vhci_hcd.0: Device attached [ 286.336634][ T8173] vhci_hcd: connection closed [ 286.356929][ T6080] vhci_hcd: stop threads [ 286.380304][ T6080] vhci_hcd: release socket [ 286.380386][ T6080] vhci_hcd: disconnect device [ 287.545241][ T8206] input input41: cannot allocate more than FF_MAX_EFFECTS effects [ 288.530298][ T5925] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 288.682738][ T5925] usb 6-1: config 0 has no interfaces? [ 288.682776][ T5925] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 288.682799][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.764788][ T5925] usb 6-1: config 0 descriptor?? [ 290.215259][ T6152] usb 6-1: USB disconnect, device number 5 [ 290.791460][ T8238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.760'. [ 291.255440][ T8251] netlink: 12 bytes leftover after parsing attributes in process `syz.4.764'. [ 292.402091][ T986] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 292.602258][ T986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.602295][ T986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.602337][ T986] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 292.602361][ T986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.977629][ T986] usb 3-1: config 0 descriptor?? [ 294.145178][ T59] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 294.415420][ T986] usbhid 3-1:0.0: can't add hid device: -71 [ 294.415514][ T986] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 294.418285][ T986] usb 3-1: USB disconnect, device number 6 [ 298.403970][ T8329] 9pnet_fd: Insufficient options for proto=fd [ 298.559175][ T8335] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.427195][ T8339] loop2: detected capacity change from 0 to 7 [ 299.471996][ T5836] Dev loop2: unable to read RDB block 7 [ 299.472055][ T5836] loop2: unable to read partition table [ 299.472296][ T5836] loop2: partition table beyond EOD, truncated [ 299.525845][ T8339] Dev loop2: unable to read RDB block 7 [ 299.525895][ T8339] loop2: unable to read partition table [ 299.526147][ T8339] loop2: partition table beyond EOD, truncated [ 299.526182][ T8339] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 299.625997][ T38] audit: type=1800 audit(1756069837.978:19): pid=8343 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.794" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0 [ 301.685601][ T8370] input input42: cannot allocate more than FF_MAX_EFFECTS effects [ 304.063725][ T8389] netlink: 76 bytes leftover after parsing attributes in process `syz.2.806'. [ 304.831812][ T8391] input input43: cannot allocate more than FF_MAX_EFFECTS effects [ 306.444311][ T8403] input input44: cannot allocate more than FF_MAX_EFFECTS effects [ 309.969421][ T8433] input input45: cannot allocate more than FF_MAX_EFFECTS effects [ 314.204542][ C1] vkms_vblank_simulate: vblank timer overrun [ 314.477284][ C1] vkms_vblank_simulate: vblank timer overrun [ 314.618826][ T8456] syz.3.821 (8456): drop_caches: 2 [ 315.032216][ C1] vkms_vblank_simulate: vblank timer overrun [ 315.354264][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.105042][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.158047][ T8486] input input46: cannot allocate more than FF_MAX_EFFECTS effects [ 316.172015][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.411762][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.764366][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.141355][ T8499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.829'. [ 317.141383][ T8499] netlink: 'syz.4.829': attribute type 3 has an invalid length. [ 317.276146][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.433263][ T8503] input input47: cannot allocate more than FF_MAX_EFFECTS effects [ 318.442540][ T8516] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 318.442579][ T8516] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 318.512387][ T8516] vhci_hcd vhci_hcd.0: Device attached [ 319.310671][ T9] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 319.341209][ T8518] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 319.343013][ T8517] vhci_hcd: connection closed [ 319.358884][ T6133] vhci_hcd: stop threads [ 319.358906][ T6133] vhci_hcd: release socket [ 319.368932][ T6133] vhci_hcd: disconnect device [ 320.730347][ T986] IPVS: starting estimator thread 0... [ 320.859792][ T8531] IPVS: using max 10 ests per chain, 24000 per kthread [ 321.199533][ C0] vkms_vblank_simulate: vblank timer overrun [ 321.491013][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.111729][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.784728][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.974717][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.974805][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.039848][ C0] vkms_vblank_simulate: vblank timer overrun [ 323.460385][ C0] vkms_vblank_simulate: vblank timer overrun [ 323.624594][ C0] vkms_vblank_simulate: vblank timer overrun [ 324.390377][ T9] vhci_hcd: vhci_device speed not set [ 324.867891][ T8569] syzkaller0: entered promiscuous mode [ 324.867922][ T8569] syzkaller0: entered allmulticast mode [ 325.810804][ C1] vcan0: j1939_tp_rxtimer: 0xffff888048c5a800: rx timeout, send abort [ 326.312793][ C1] vcan0: j1939_tp_rxtimer: 0xffff888048c5a800: abort rx timeout. Force session deactivation [ 331.069599][ T38] audit: type=1326 audit(1756069869.428:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8615 comm="syz.1.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85322febe9 code=0x7ffc0000 [ 331.069660][ T38] audit: type=1326 audit(1756069869.428:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8615 comm="syz.1.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85322febe9 code=0x7ffc0000 [ 331.069708][ T38] audit: type=1326 audit(1756069869.428:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8615 comm="syz.1.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85322febe9 code=0x7ffc0000 [ 331.069754][ T38] audit: type=1326 audit(1756069869.428:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8615 comm="syz.1.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85322febe9 code=0x7ffc0000 [ 331.069801][ T38] audit: type=1326 audit(1756069869.428:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8615 comm="syz.1.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85322febe9 code=0x7ffc0000 [ 331.069848][ T38] audit: type=1326 audit(1756069869.428:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8615 comm="syz.1.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f85322febe9 code=0x7ffc0000 [ 331.069894][ T38] audit: type=1326 audit(1756069869.428:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8615 comm="syz.1.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85322febe9 code=0x7ffc0000 [ 331.070870][ T38] audit: type=1326 audit(1756069869.428:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8615 comm="syz.1.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f85322febe9 code=0x7ffc0000 [ 331.070940][ T38] audit: type=1326 audit(1756069869.438:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8615 comm="syz.1.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85322febe9 code=0x7ffc0000 [ 331.071551][ T38] audit: type=1326 audit(1756069869.438:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8615 comm="syz.1.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f85322febe9 code=0x7ffc0000 [ 331.615710][ T5923] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 332.750932][ T5923] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.750994][ T5923] usb 6-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 332.751019][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.772452][ T5923] usb 6-1: config 0 descriptor?? [ 333.354061][ T8631] netlink: 14 bytes leftover after parsing attributes in process `syz.2.866'. [ 335.100455][ T5901] usb 6-1: USB disconnect, device number 6 [ 335.340282][ T6152] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 335.497016][ T6152] usb 3-1: config 0 has no interfaces? [ 335.497055][ T6152] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 335.497080][ T6152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.411349][ T6152] usb 3-1: config 0 descriptor?? [ 336.717215][ T6152] usb 3-1: USB disconnect, device number 7 [ 336.937692][ T8662] netlink: 14 bytes leftover after parsing attributes in process `syz.1.879'. [ 338.800570][ T6152] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 338.842724][ T38] kauditd_printk_skb: 7 callbacks suppressed [ 338.842743][ T38] audit: type=1800 audit(1756069877.208:37): pid=8673 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.877" name="/" dev="9p" ino=2 res=0 errno=0 [ 338.880429][ T986] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 339.031216][ T986] usb 5-1: Using ep0 maxpacket: 32 [ 339.037963][ T986] usb 5-1: config 0 has an invalid descriptor of length 51, skipping remainder of the config [ 339.073859][ T986] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 339.073890][ T986] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.073911][ T986] usb 5-1: Product: syz [ 339.073925][ T986] usb 5-1: Manufacturer: syz [ 339.073940][ T986] usb 5-1: SerialNumber: syz [ 339.116670][ T986] usb 5-1: config 0 descriptor?? [ 339.135250][ T986] cdc_ether 5-1:0.0: probe with driver cdc_ether failed with error -22 [ 339.139465][ T986] usb 5-1: unsupported MDLM descriptors [ 340.328193][ T8681] input input48: cannot allocate more than FF_MAX_EFFECTS effects [ 341.483817][ T6152] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 341.542417][ T6152] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 341.807897][ T5901] usb 5-1: USB disconnect, device number 6 [ 342.153795][ T38] audit: type=1326 audit(1756069880.518:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8698 comm="syz.5.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38033eebe9 code=0x7ffc0000 [ 342.153857][ T38] audit: type=1326 audit(1756069880.518:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8698 comm="syz.5.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38033eebe9 code=0x7ffc0000 [ 342.184246][ T38] audit: type=1326 audit(1756069880.548:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8698 comm="syz.5.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f38033eebe9 code=0x7ffc0000 [ 342.184308][ T38] audit: type=1326 audit(1756069880.548:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8698 comm="syz.5.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38033eebe9 code=0x7ffc0000 [ 342.184361][ T38] audit: type=1326 audit(1756069880.548:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8698 comm="syz.5.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38033eebe9 code=0x7ffc0000 [ 342.184718][ T38] audit: type=1326 audit(1756069880.548:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8698 comm="syz.5.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f38033eebe9 code=0x7ffc0000 [ 342.200319][ T38] audit: type=1326 audit(1756069880.548:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8698 comm="syz.5.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38033eebe9 code=0x7ffc0000 [ 342.200374][ T38] audit: type=1326 audit(1756069880.558:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8698 comm="syz.5.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38033eebe9 code=0x7ffc0000 [ 342.200421][ T38] audit: type=1326 audit(1756069880.558:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8698 comm="syz.5.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38033eebe9 code=0x7ffc0000 [ 342.579125][ T8706] binder_alloc: 8705: binder_alloc_buf, no vma [ 344.160595][ T8716] netlink: 14 bytes leftover after parsing attributes in process `syz.4.892'. [ 346.785995][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 346.786221][ T8719] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 349.396753][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 349.473751][ T59] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 351.958931][ T8780] netlink: 56 bytes leftover after parsing attributes in process `syz.5.904'. [ 355.294890][ T8813] kvm: kvm [8812]: vcpu2, guest rIP: 0x208 Unhandled WRMSR(0x187) = 0x20000402c [ 358.436783][ T38] kauditd_printk_skb: 3 callbacks suppressed [ 358.436804][ T38] audit: type=1804 audit(1756069896.788:50): pid=8839 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.5.917" name="/newroot/115/file1" dev="fuse" ino=1 res=1 errno=0 [ 358.443859][ T38] audit: type=1804 audit(1756069896.808:51): pid=8836 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.917" name="/newroot/115/file1" dev="fuse" ino=1 res=1 errno=0 [ 358.444171][ T38] audit: type=1800 audit(1756069896.808:52): pid=8836 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.917" name="/" dev="fuse" ino=1 res=0 errno=0 [ 368.444404][ T8909] netlink: 'syz.5.935': attribute type 1 has an invalid length. [ 368.616539][ T8909] 8021q: adding VLAN 0 to HW filter on device bond2 [ 368.662804][ T8911] vlan2: entered allmulticast mode [ 368.662827][ T8911] macvtap0: entered allmulticast mode [ 368.662840][ T8911] veth0_macvtap: entered allmulticast mode [ 368.668939][ T8911] bond2: (slave vlan2): making interface the new active one [ 368.706801][ T8911] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 370.691299][ T8927] netlink: 'syz.5.941': attribute type 12 has an invalid length. [ 371.481850][ T5942] IPVS: starting estimator thread 0... [ 371.506889][ T8934] tipc: Started in network mode [ 371.506915][ T8934] tipc: Node identity ac1414aa, cluster identity 4711 [ 371.549253][ T8934] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 371.560289][ T8934] tipc: Enabled bearer , priority 10 [ 371.580336][ T8935] IPVS: using max 10 ests per chain, 24000 per kthread [ 371.683595][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 371.830230][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 371.970276][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 372.199534][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 373.100349][ T5942] tipc: Node number set to 2886997162 [ 373.280422][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 373.550384][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 374.080266][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 375.253824][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 376.330441][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 377.360250][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 378.400945][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 379.440396][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 380.480309][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 381.520241][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 382.570321][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 382.980373][ T6152] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 383.618346][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 383.768425][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.768480][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.644684][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 385.690274][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 386.720300][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 387.297514][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 387.319946][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 387.327956][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 387.333844][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 387.334809][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 387.760445][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 389.429976][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 389.440248][ T59] Bluetooth: hci4: command tx timeout [ 389.525286][ T8990] chnl_net:caif_netlink_parms(): no params data found [ 390.490415][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 390.907483][ T8990] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.907591][ T8990] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.907758][ T8990] bridge_slave_0: entered allmulticast mode [ 390.909620][ T8990] bridge_slave_0: entered promiscuous mode [ 391.016450][ T8990] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.016615][ T8990] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.016860][ T8990] bridge_slave_1: entered allmulticast mode [ 391.053011][ T8990] bridge_slave_1: entered promiscuous mode [ 391.520221][ T59] Bluetooth: hci4: command tx timeout [ 391.520502][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 391.677379][ T8990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.743024][ T8990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.560390][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 392.786142][ T8990] team0: Port device team_slave_0 added [ 392.788739][ T8990] team0: Port device team_slave_1 added [ 393.096870][ T9039] input input49: cannot allocate more than FF_MAX_EFFECTS effects [ 393.616961][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 394.300216][ T59] Bluetooth: hci4: command tx timeout [ 394.640373][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 394.918509][ T9046] sctp: [Deprecated]: syz.5.974 (pid 9046) Use of int in max_burst socket option deprecated. [ 394.918509][ T9046] Use struct sctp_assoc_value instead [ 395.242452][ T8990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.242468][ T8990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.242494][ T8990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.255198][ T8990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.255216][ T8990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.255248][ T8990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.350334][ T31] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 395.502907][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 395.512382][ T31] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 395.512419][ T31] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 395.512449][ T31] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 395.512478][ T31] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 395.512537][ T31] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 395.512565][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.680317][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 395.745027][ T31] usb 3-1: GET_CAPABILITIES returned 0 [ 395.745075][ T31] usbtmc 3-1:16.0: can't read capabilities [ 395.970976][ T31] usb 3-1: USB disconnect, device number 9 [ 397.042516][ T59] Bluetooth: hci4: command tx timeout [ 397.351945][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 397.367134][ T9052] fuse: Bad value for 'fd' [ 397.498471][ T8990] hsr_slave_0: entered promiscuous mode [ 397.524491][ T8990] hsr_slave_1: entered promiscuous mode [ 397.527743][ T8990] debugfs: 'hsr0' already exists in 'hsr' [ 397.527770][ T8990] Cannot create hsr debugfs directory [ 398.323536][ T9059] input input50: cannot allocate more than FF_MAX_EFFECTS effects [ 398.408013][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 399.250766][ T3599] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.281950][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 400.720798][ T9068] comedi comedi3: bad chanlist[0]=0x80000000 chan=0 range length=4 [ 401.712954][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 401.866632][ T3599] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.720517][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 403.761164][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 404.330557][ T9089] input input51: cannot allocate more than FF_MAX_EFFECTS effects [ 404.616742][ T9095] block nbd5: Attempted send on invalid socket [ 404.617137][ T9095] blk_print_req_error: 19 callbacks suppressed [ 404.617306][ T9095] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.804096][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 405.276031][ T3599] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.396094][ T9100] netlink: 'syz.5.992': attribute type 1 has an invalid length. [ 405.396118][ T9100] netlink: 208 bytes leftover after parsing attributes in process `syz.5.992'. [ 406.608137][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 407.719753][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 408.755379][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 409.798402][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 410.047746][ T3599] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.800219][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 411.982445][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 412.064440][ T9124] delete_channel: no stack [ 412.568121][ T9142] netlink: 'syz.3.1001': attribute type 4 has an invalid length. [ 412.568140][ T9142] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1001'. [ 412.570520][ T3599] bridge_slave_1: left allmulticast mode [ 412.570556][ T3599] bridge_slave_1: left promiscuous mode [ 412.571719][ T3599] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.885570][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 413.917426][ T3599] bridge_slave_0: left allmulticast mode [ 413.917462][ T3599] bridge_slave_0: left promiscuous mode [ 413.921234][ T3599] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.057298][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 416.084298][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 417.120463][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 418.160419][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 418.365409][ T3599] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.446433][ T3599] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.465103][ T3599] bond0 (unregistering): Released all slaves [ 418.484084][ T3599] bond1 (unregistering): Released all slaves [ 418.845077][ T9142] : renamed from bond0 (while UP) [ 420.267988][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 421.280274][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 421.335383][ T3599] IPVS: stopping master sync thread 6568 ... [ 421.365679][ T9164] (syz.2.1007,9164,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 421.365701][ T9164] (syz.2.1007,9164,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 421.681957][ T9174] input input52: cannot allocate more than FF_MAX_EFFECTS effects [ 422.806149][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 423.439440][ C0] vkms_vblank_simulate: vblank timer overrun [ 423.816013][ C0] vkms_vblank_simulate: vblank timer overrun [ 424.046023][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 424.081178][ C0] vkms_vblank_simulate: vblank timer overrun [ 424.316427][ C0] vkms_vblank_simulate: vblank timer overrun [ 425.178500][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 425.294072][ C0] vkms_vblank_simulate: vblank timer overrun [ 425.751909][ C0] vkms_vblank_simulate: vblank timer overrun [ 425.924434][ C0] vkms_vblank_simulate: vblank timer overrun [ 426.444181][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 426.729409][ C0] vkms_vblank_simulate: vblank timer overrun [ 426.814509][ C0] vkms_vblank_simulate: vblank timer overrun [ 427.743926][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 427.828687][ C0] vkms_vblank_simulate: vblank timer overrun [ 427.900202][ C0] vkms_vblank_simulate: vblank timer overrun [ 428.800339][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 429.851058][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 430.880387][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 431.930525][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 432.538733][ T8990] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 432.729374][ T8990] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 432.962788][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 434.000324][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 434.357738][ C0] vkms_vblank_simulate: vblank timer overrun [ 435.040439][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 435.164334][ C0] vkms_vblank_simulate: vblank timer overrun [ 435.246740][ T8990] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 435.450651][ T8990] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 435.452947][ T9241] input input53: cannot allocate more than FF_MAX_EFFECTS effects [ 435.536459][ T9242] tipc: Started in network mode [ 435.536482][ T9242] tipc: Node identity 1a6ff6dabb4e, cluster identity 4711 [ 435.536782][ T9242] tipc: Enabled bearer , priority 0 [ 435.799410][ T3599] hsr_slave_0: left promiscuous mode [ 435.826790][ T3599] hsr_slave_1: left promiscuous mode [ 435.829368][ T3599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.829400][ T3599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.901835][ T3599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.901867][ T3599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.080313][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 436.532645][ T986] tipc: Node number set to 2703357658 [ 437.120463][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 438.161060][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 439.200477][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 439.601541][ T3599] veth1_macvtap: left promiscuous mode [ 439.602745][ T3599] veth0_macvtap: left promiscuous mode [ 439.604444][ T3599] veth1_vlan: left promiscuous mode [ 439.604673][ T3599] veth0_vlan: left promiscuous mode [ 440.250355][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 441.569328][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 442.723513][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 443.769204][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 444.801402][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 445.206606][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.271435][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 445.277345][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 445.279659][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 445.321463][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 445.322240][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 445.850315][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 446.880336][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 447.036211][ T3599] team0 (unregistering): Port device team_slave_1 removed [ 447.235192][ T3599] team0 (unregistering): Port device team_slave_0 removed [ 447.445821][ T59] Bluetooth: hci3: command tx timeout [ 447.925553][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 448.960329][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 449.277011][ T8990] kthread_run failed with err -4 [ 449.282589][ T9259] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1032'. [ 449.442178][ T9238] syzkaller0: entered promiscuous mode [ 449.442214][ T9238] syzkaller0: entered allmulticast mode [ 449.532890][ T59] Bluetooth: hci3: command tx timeout [ 449.643610][ T9246] tipc: Resetting bearer [ 449.684077][ T9237] tipc: Resetting bearer [ 450.000783][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 450.404953][ T5925] kernel write not supported for file /input/event2 (pid: 5925 comm: kworker/1:5) [ 450.465024][ T9290] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1040'. [ 450.517864][ T9291] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1040'. [ 450.687520][ T9237] tipc: Disabling bearer [ 451.065026][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 451.930594][ T59] Bluetooth: hci3: command tx timeout [ 452.080345][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 452.453791][ T5837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 452.465543][ T5837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 452.472237][ T5837] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 452.491693][ T5837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 452.492682][ T5837] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 453.260278][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 454.000389][ T5837] Bluetooth: hci3: command tx timeout [ 454.336015][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 455.360298][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 455.442816][ T5837] Bluetooth: hci6: command tx timeout [ 456.400419][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 457.440417][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 457.520346][ T5837] Bluetooth: hci6: command tx timeout [ 458.540998][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 460.258054][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 460.259465][ T5837] Bluetooth: hci6: command tx timeout [ 461.360279][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 462.422211][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 462.446132][ T5837] Bluetooth: hci6: command tx timeout [ 463.440211][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 464.555000][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 465.149569][ T9376] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1059'. [ 466.382077][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 466.882013][ T9274] chnl_net:caif_netlink_parms(): no params data found [ 466.951988][ T9390] kvm: kvm [9389]: vcpu2, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x70000008ea7 [ 467.682126][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 468.137191][ T9404] input input54: cannot allocate more than FF_MAX_EFFECTS effects [ 468.720380][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 469.760605][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 470.810467][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 471.840425][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 472.880382][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 472.964541][ T9415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1067'. [ 473.930348][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 474.960244][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 475.785830][ T1022] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.000286][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 477.040315][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 478.151892][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 478.555695][ T1022] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.200423][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 480.053584][ T9445] binder: 9440:9445 ioctl 400c620e 200000000000 returned -22 [ 480.266651][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 480.322441][ T1022] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.563275][ T9305] chnl_net:caif_netlink_parms(): no params data found [ 481.281282][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 482.321497][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 483.372161][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 484.400421][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 484.689983][ T1022] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.021675][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 487.391994][ T9477] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1081'. [ 487.676854][ T9274] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.677077][ T9274] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.677318][ T9274] bridge_slave_0: entered allmulticast mode [ 487.702849][ T9274] bridge_slave_0: entered promiscuous mode [ 488.158427][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 489.594582][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 490.562916][ T9274] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.563058][ T9274] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.563303][ T9274] bridge_slave_1: entered allmulticast mode [ 490.612372][ T9274] bridge_slave_1: entered promiscuous mode [ 490.640347][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 490.820191][ T9495] bridge0: port 3(syz_tun) entered blocking state [ 490.822214][ T9495] bridge0: port 3(syz_tun) entered disabled state [ 490.854067][ T9495] syz_tun: entered allmulticast mode [ 490.894343][ T9495] syz_tun: entered promiscuous mode [ 490.897394][ T9495] bridge0: port 3(syz_tun) entered blocking state [ 490.897728][ T9495] bridge0: port 3(syz_tun) entered forwarding state [ 491.797100][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 493.435889][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 494.331984][ T9274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.438802][ T9274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.480262][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 494.782198][ T9305] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.782350][ T9305] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.782581][ T9305] bridge_slave_0: entered allmulticast mode [ 494.784866][ T9305] bridge_slave_0: entered promiscuous mode [ 494.930336][ T6152] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 495.051757][ T9305] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.051906][ T9305] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.052255][ T9305] bridge_slave_1: entered allmulticast mode [ 495.087091][ T9305] bridge_slave_1: entered promiscuous mode [ 495.092114][ T6152] usb 3-1: Using ep0 maxpacket: 16 [ 495.098834][ T6152] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.098862][ T6152] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 495.098906][ T6152] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 495.098932][ T6152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.123401][ T6152] usb 3-1: config 0 descriptor?? [ 495.223168][ T9274] team0: Port device team_slave_0 added [ 495.388353][ T9274] team0: Port device team_slave_1 added [ 495.520288][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 495.729899][ T9525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1095'. [ 496.560377][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 496.792726][ T9305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.257823][ T9305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.271709][ T9274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.271726][ T9274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.271754][ T9274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.374227][ C0] vkms_vblank_simulate: vblank timer overrun [ 497.602317][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 497.631129][ C0] vkms_vblank_simulate: vblank timer overrun [ 497.962035][ C0] vkms_vblank_simulate: vblank timer overrun [ 498.336117][ T6164] usb 3-1: USB disconnect, device number 10 [ 498.440699][ C0] vkms_vblank_simulate: vblank timer overrun [ 498.650852][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 498.724491][ C0] vkms_vblank_simulate: vblank timer overrun [ 498.839075][ C0] vkms_vblank_simulate: vblank timer overrun [ 498.881372][ T9274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.881389][ T9274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.881416][ T9274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.108919][ C0] vkms_vblank_simulate: vblank timer overrun [ 499.404045][ C0] vkms_vblank_simulate: vblank timer overrun [ 499.874222][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 501.438223][ T9548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1100'. [ 501.438249][ T9548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1100'. [ 501.459573][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 501.495648][ C0] vkms_vblank_simulate: vblank timer overrun [ 501.796859][ C0] vkms_vblank_simulate: vblank timer overrun [ 501.909940][ T9305] team0: Port device team_slave_0 added [ 501.978560][ T9305] team0: Port device team_slave_1 added [ 502.069292][ T9557] comedi: valid board names for 8255 driver are: [ 502.069305][ T9557] 8255 [ 502.069310][ T9557] comedi: valid board names for vmk80xx driver are: [ 502.069316][ T9557] vmk80xx [ 502.069321][ T9557] comedi: valid board names for usbduxsigma driver are: [ 502.069327][ T9557] usbduxsigma [ 502.069332][ T9557] comedi: valid board names for usbduxfast driver are: [ 502.069338][ T9557] usbduxfast [ 502.069342][ T9557] comedi: valid board names for usbdux driver are: [ 502.069348][ T9557] usbdux [ 502.069353][ T9557] comedi: valid board names for ni6501 driver are: [ 502.069358][ T9557] ni6501 [ 502.069363][ T9557] comedi: valid board names for dt9812 driver are: [ 502.069369][ T9557] dt9812 [ 502.069373][ T9557] comedi: valid board names for ni_labpc_cs driver are: [ 502.069379][ T9557] ni_labpc_cs [ 502.069383][ T9557] comedi: valid board names for ni_daq_700 driver are: [ 502.069389][ T9557] ni_daq_700 [ 502.069394][ T9557] comedi: valid board names for labpc_pci driver are: [ 502.069401][ T9557] labpc_pci [ 502.069407][ T9557] comedi: valid board names for adl_pci9118 driver are: [ 502.069413][ T9557] pci9118dg [ 502.069418][ T9557] pci9118hg [ 502.069422][ T9557] pci9118hr [ 502.069426][ T9557] comedi: valid board names for 8255_pci driver are: [ 502.069432][ T9557] 8255_pci [ 502.069437][ T9557] comedi: valid board names for s526 driver are: [ 502.069442][ T9557] s526 [ 502.069447][ T9557] comedi: valid board names for multiq3 driver are: [ 502.069452][ T9557] multiq3 [ 502.069457][ T9557] comedi: valid board names for pcmuio driver are: [ 502.069463][ T9557] pcmuio48 [ 502.069467][ T9557] pcmuio96 [ 502.069471][ T9557] comedi: valid board names for pcmmio driver are: [ 502.069477][ T9557] pcmmio [ 502.069481][ T9557] comedi: valid board names for pcmda12 driver are: [ 502.069487][ T9557] pcmda12 [ 502.069491][ T9557] comedi: valid board names for pcmad driver are: [ 502.069497][ T9557] pcmad12 [ 502.069501][ T9557] pcmad16 [ 502.069506][ T9557] comedi: valid board names for ni_labpc driver are: [ 502.069511][ T9557] lab-pc-1200 [ 502.069516][ T9557] lab-pc-1200ai [ 502.069520][ T9557] lab-pc+ [ 502.069526][ T9557] comedi: valid board names for atmio16 driver are: [ 502.285702][ T9557] atmio16 [ 502.285714][ T9557] atmio16d [ 502.285721][ T9557] comedi: valid board names for ni_at_ao driver are: [ 502.285730][ T9557] at-ao-6 [ 502.285736][ T9557] at-ao-10 [ 502.285743][ T9557] comedi: valid board names for ni_at_a2150 driver are: [ 502.285751][ T9557] ni_at_a2150 [ 502.285757][ T9557] comedi: valid board names for adq12b driver are: [ 502.285766][ T9557] adq12b [ 502.285772][ T9557] comedi: valid board names for mpc624 driver are: [ 502.285781][ T9557] mpc624 [ 502.285789][ T9557] comedi: valid board names for c6xdigio driver are: [ 502.285798][ T9557] c6xdigio [ 502.285805][ T9557] comedi: valid board names for aio_iiro_16 driver are: [ 502.285815][ T9557] aio_iiro_16 [ 502.285822][ T9557] comedi: valid board names for aio_aio12_8 driver are: [ 502.285832][ T9557] aio_aio12_8 [ 502.285838][ T9557] aio_ai12_8 [ 502.285844][ T9557] aio_ao12_4 [ 502.285860][ T9557] comedi: valid board names for fl512 driver are: [ 502.285869][ T9557] fl512 [ 502.285876][ T9557] comedi: valid board names for dmm32at driver are: [ 502.285886][ T9557] dmm32at [ 502.285892][ T9557] comedi: valid board names for dt282x driver are: [ 502.285902][ T9557] dt2821 [ 502.285908][ T9557] dt2821-f [ 502.285915][ T9557] dt2821-g [ 502.285922][ T9557] dt2823 [ 502.285929][ T9557] dt2824-pgh [ 502.285936][ T9557] dt2824-pgl [ 502.285942][ T9557] dt2825 [ 502.285947][ T9557] dt2827 [ 502.285954][ T9557] dt2828 [ 502.285960][ T9557] dt2829 [ 502.285966][ T9557] dt21-ez [ 502.285973][ T9557] dt23-ez [ 502.285979][ T9557] dt24-ez [ 502.285986][ T9557] dt24-ez-pgl [ 502.285992][ T9557] comedi: valid board names for dt2817 driver are: [ 502.286001][ T9557] dt2817 [ 502.286008][ T9557] comedi: valid board names for dt2815 driver are: [ 502.286016][ T9557] dt2815 [ 502.286023][ T9557] comedi: valid board names for dt2814 driver are: [ 502.286032][ T9557] dt2814 [ 502.286037][ T9557] comedi: valid board names for dt2811 driver are: [ 502.286046][ T9557] dt2811-pgh [ 502.286052][ T9557] dt2811-pgl [ 502.286059][ T9557] comedi: valid board names for dt2801 driver are: [ 502.286068][ T9557] dt2801 [ 502.286074][ T9557] comedi: valid board names for das6402 driver are: [ 502.286083][ T9557] das6402-12 [ 502.286090][ T9557] das6402-16 [ 502.286097][ T9557] comedi: valid board names for das1800 driver are: [ 502.286106][ T9557] das-1701st [ 502.286113][ T9557] das-1701st-da [ 502.286120][ T9557] das-1702st [ 502.286126][ T9557] das-1702st-da [ 502.286133][ T9557] das-1702hr [ 502.286140][ T9557] das-1702hr-da [ 502.286147][ T9557] das-1701ao [ 502.286153][ T9557] das-1702ao [ 502.286208][ T9557] das-1801st [ 502.286214][ T9557] das-1801st-da [ 502.286220][ T9557] das-1802st [ 502.286226][ T9557] das-1802st-da [ 502.286232][ T9557] das-1802hr [ 502.286237][ T9557] das-1802hr-da [ 502.286243][ T9557] das-1801hc [ 502.286249][ T9557] das-1802hc [ 502.286254][ T9557] das-1801ao [ 502.286260][ T9557] das-1802ao [ 502.286266][ T9557] comedi: valid board names for das800 driver are: [ 502.286274][ T9557] das-800 [ 502.286280][ T9557] cio-das800 [ 502.286286][ T9557] das-801 [ 502.286292][ T9557] cio-das801 [ 502.286298][ T9557] das-802 [ 502.286304][ T9557] cio-das802 [ 502.286310][ T9557] cio-das802/16 [ 502.286316][ T9557] comedi: valid board names for isa-das08 driver are: [ 502.286326][ T9557] isa-das08 [ 502.286333][ T9557] das08-pgm [ 502.286339][ T9557] das08-pgh [ 502.286346][ T9557] das08-pgl [ 502.286353][ T9557] das08-aoh [ 502.286360][ T9557] das08-aol [ 502.286367][ T9557] das08-aom [ 502.286373][ T9557] das08/jr-ao [ 502.286380][ T9557] das08jr-16-ao [ 502.286387][ T9557] pc104-das08 [ 502.286394][ T9557] das08jr/16 [ 502.286402][ T9557] comedi: valid board names for das16m1 driver are: [ 502.286411][ T9557] das16m1 [ 502.286418][ T9557] comedi: valid board names for dac02 driver are: [ 502.286427][ T9557] dac02 [ 502.286434][ T9557] comedi: valid board names for rti802 driver are: [ 502.286443][ T9557] rti802 [ 502.286450][ T9557] comedi: valid board names for rti800 driver are: [ 502.286460][ T9557] rti800 [ 502.286466][ T9557] rti815 [ 502.286474][ T9557] comedi: valid board names for pcm3724 driver are: [ 502.286483][ T9557] pcm3724 [ 502.286489][ T9557] comedi: valid board names for pcl818 driver are: [ 502.286499][ T9557] pcl818l [ 502.286506][ T9557] pcl818h [ 502.286513][ T9557] pcl818hd [ 502.286519][ T9557] pcl818hg [ 502.286526][ T9557] pcl818 [ 502.286532][ T9557] pcl718 [ 502.286538][ T9557] pcm3718 [ 502.286544][ T9557] comedi: valid board names for pcl816 driver are: [ 502.286553][ T9557] pcl816 [ 502.286559][ T9557] pcl814b [ 502.286566][ T9557] comedi: valid board names for pcl812 driver are: [ 502.286575][ T9557] pcl812 [ 502.286581][ T9557] pcl812pg [ 502.286587][ T9557] acl8112pg [ 502.286605][ T9557] acl8112dg [ 502.286612][ T9557] acl8112hg [ 502.480635][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 502.676954][ T9557] a821pgl [ 502.676969][ T9557] a821pglnda [ 502.676975][ T9557] a821pgh [ 502.676980][ T9557] a822pgl [ 502.676985][ T9557] a822pgh [ 502.676990][ T9557] a823pgl [ 502.676994][ T9557] a823pgh [ 502.676999][ T9557] pcl813 [ 502.677004][ T9557] pcl813b [ 502.677009][ T9557] acl8113 [ 502.677013][ T9557] iso813 [ 502.677018][ T9557] acl8216 [ 502.677022][ T9557] a826pg [ 502.677028][ T9557] comedi: valid board names for pcl730 driver are: [ 502.677035][ T9557] pcl730 [ 502.677040][ T9557] iso730 [ 502.677044][ T9557] acl7130 [ 502.677049][ T9557] pcm3730 [ 502.677054][ T9557] pcl725 [ 502.677058][ T9557] p8r8dio [ 502.677063][ T9557] acl7225b [ 502.677068][ T9557] p16r16dio [ 502.677072][ T9557] pcl733 [ 502.677077][ T9557] pcl734 [ 502.677082][ T9557] opmm-1616-xt [ 502.677087][ T9557] pearl-mm-p [ 502.677092][ T9557] ir104-pbf [ 502.677097][ T9557] comedi: valid board names for pcl726 driver are: [ 502.677103][ T9557] pcl726 [ 502.677108][ T9557] pcl727 [ 502.677112][ T9557] pcl728 [ 502.677117][ T9557] acl6126 [ 502.677121][ T9557] acl6128 [ 502.677126][ T9557] comedi: valid board names for pcl724 driver are: [ 502.677133][ T9557] pcl724 [ 502.677137][ T9557] pcl722 [ 502.677142][ T9557] pcl731 [ 502.677146][ T9557] acl7122 [ 502.677151][ T9557] acl7124 [ 502.677156][ T9557] pet48dio [ 502.677160][ T9557] pcmio48 [ 502.677166][ T9557] onyx-mm-dio [ 502.677170][ T9557] comedi: valid board names for pcl711 driver are: [ 502.677209][ T9557] pcl711 [ 502.677213][ T9557] pcl711b [ 502.677218][ T9557] acl8112hg [ 502.677223][ T9557] acl8112dg [ 502.677228][ T9557] comedi: valid board names for amplc_pc263 driver are: [ 502.677235][ T9557] pc263 [ 502.677239][ T9557] comedi: valid board names for amplc_pc236 driver are: [ 502.677246][ T9557] pc36at [ 502.677251][ T9557] comedi: valid board names for amplc_dio200 driver are: [ 502.677258][ T9557] pc212e [ 502.677263][ T9557] pc214e [ 502.677267][ T9557] pc215e [ 502.677272][ T9557] pc218e [ 502.677276][ T9557] pc272e [ 502.677281][ T9557] comedi: valid board names for comedi_parport driver are: [ 502.677288][ T9557] comedi_parport [ 502.677293][ T9557] comedi: valid board names for comedi_test driver are: [ 502.677300][ T9557] comedi_test [ 502.677305][ T9557] comedi: valid board names for comedi_bond driver are: [ 502.677311][ T9557] comedi_bond [ 503.520425][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 503.923407][ T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 504.219069][ T9566] overlayfs: failed to clone upperpath [ 505.021267][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 505.244329][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.244407][ T31] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 505.244425][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.248067][ T31] usb 2-1: config 0 descriptor?? [ 505.297508][ T31] pwc: Askey VC010 type 2 USB webcam detected. [ 505.626207][ T9571] Invalid source name [ 505.626225][ T9571] UBIFS error (pid: 9571): cannot open "ubifs", error -22 [ 506.397750][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 506.649336][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.689110][ T31] pwc: recv_control_msg error -32 req 02 val 2b00 [ 506.700300][ T31] pwc: recv_control_msg error -32 req 02 val 2700 [ 506.702847][ T31] pwc: recv_control_msg error -32 req 02 val 2c00 [ 506.704629][ T31] pwc: recv_control_msg error -32 req 04 val 1000 [ 506.706361][ T31] pwc: recv_control_msg error -32 req 04 val 1300 [ 506.709700][ T31] pwc: recv_control_msg error -32 req 04 val 1400 [ 506.744634][ T31] pwc: recv_control_msg error -32 req 02 val 2000 [ 506.746707][ T31] pwc: recv_control_msg error -32 req 02 val 2100 [ 506.780279][ T31] pwc: recv_control_msg error -32 req 04 val 1500 [ 506.781244][ T31] pwc: recv_control_msg error -32 req 02 val 2500 [ 506.787380][ T31] pwc: recv_control_msg error -32 req 02 val 2400 [ 506.788439][ T31] pwc: recv_control_msg error -32 req 02 val 2600 [ 506.789148][ T31] pwc: recv_control_msg error -32 req 02 val 2900 [ 506.789993][ T31] pwc: recv_control_msg error -32 req 02 val 2800 [ 506.840561][ T31] pwc: recv_control_msg error -32 req 04 val 1100 [ 506.865205][ T31] pwc: Registered as video103. [ 506.869021][ T31] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input55 [ 506.883913][ T9305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.883932][ T9305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.883966][ T9305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.910527][ T9305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.910547][ T9305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.910581][ T9305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.070592][ T10] usb 2-1: USB disconnect, device number 7 [ 507.107337][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 507.139153][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 507.155375][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 507.173323][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 507.174421][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 507.442493][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 508.731718][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 509.400394][ T9589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1110'. [ 510.006305][ T5837] Bluetooth: hci4: command tx timeout [ 510.349893][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 511.360177][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 512.080524][ T5837] Bluetooth: hci4: command tx timeout [ 512.280212][ T6164] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 512.400361][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 512.505494][ T6164] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 512.505518][ T6164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.524989][ T6164] usb 2-1: config 0 descriptor?? [ 512.640335][ T6164] gspca_main: spca508-2.14.0 probing 8086:0110 [ 513.243803][ T6164] gspca_spca508: reg_read err -110 [ 513.244250][ T6164] gspca_spca508: reg_read err -32 [ 513.244577][ T6164] gspca_spca508: reg_read err -32 [ 513.244893][ T6164] gspca_spca508: reg_read err -32 [ 513.245349][ T6164] gspca_spca508: reg write: error -32 [ 513.245418][ T6164] spca508 2-1:0.0: probe with driver spca508 failed with error -32 [ 513.450201][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 513.591996][ T9305] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000013: 0000 [#1] SMP KASAN PTI [ 513.592024][ T9305] KASAN: null-ptr-deref in range [0x0000000000000098-0x000000000000009f] [ 513.592052][ T9305] CPU: 0 UID: 0 PID: 9305 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 513.592075][ T9305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 513.592090][ T9305] RIP: 0010:klist_remove+0x14d/0x340 [ 513.592121][ T9305] Code: 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 59 1b 31 f7 4d 8b 26 49 83 e4 fe 49 8d bc 24 98 00 00 00 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 37 1b 31 f7 49 8b 84 24 98 00 00 00 48 89 [ 513.592138][ T9305] RSP: 0018:ffffc90005d27600 EFLAGS: 00010202 [ 513.592158][ T9305] RAX: 0000000000000013 RBX: ffff88802135bb80 RCX: 0000000000000000 [ 513.592172][ T9305] RDX: 0000000000000006 RSI: ffffffff8d0384e3 RDI: 0000000000000098 [ 513.592185][ T9305] RBP: ffffc90005d276e8 R08: ffffffff8f1d4437 R09: 1ffffffff1e3a886 [ 513.592201][ T9305] R10: dffffc0000000000 R11: fffffbfff1e3a887 R12: 0000000000000000 [ 513.592215][ T9305] R13: 1ffff11006553a14 R14: ffff888032a9d0a0 R15: dffffc0000000000 [ 513.592231][ T9305] FS: 0000000000000000(0000) GS:ffff8881268c2000(0000) knlGS:0000000000000000 [ 513.592247][ T9305] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 513.592262][ T9305] CR2: 000020000013f030 CR3: 00000000413f0000 CR4: 00000000003526f0 [ 513.592280][ T9305] Call Trace: [ 513.592287][ T9305] [ 513.592297][ T9305] ? __pfx_klist_remove+0x10/0x10 [ 513.592326][ T9305] ? __pfx_kobject_move+0x10/0x10 [ 513.592354][ T9305] ? get_device_parent+0x370/0x3a0 [ 513.592387][ T9305] device_move+0x195/0x710 [ 513.592421][ T9305] hci_conn_del_sysfs+0xb8/0x170 [ 513.592453][ T9305] hci_conn_del+0x9b7/0xd60 [ 513.592481][ T9305] hci_conn_hash_flush+0x191/0x230 [ 513.592512][ T9305] hci_dev_close_sync+0xaef/0x1330 [ 513.592542][ T9305] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 513.592575][ T9305] ? mutex_lock_nested+0x154/0x1d0 [ 513.592605][ T9305] ? hci_unregister_dev+0x212/0x510 [ 513.592626][ T9305] hci_unregister_dev+0x21a/0x510 [ 513.592646][ T9305] vhci_release+0x83/0xe0 [ 513.592667][ T9305] ? __pfx_vhci_release+0x10/0x10 [ 513.592686][ T9305] __fput+0x45b/0xa80 [ 513.592729][ T9305] task_work_run+0x1d4/0x260 [ 513.592751][ T9305] ? __pfx_task_work_run+0x10/0x10 [ 513.592771][ T9305] ? do_exit+0x6b0/0x2300 [ 513.592799][ T9305] ? kmem_cache_free+0x195/0x510 [ 513.592828][ T9305] do_exit+0x6b5/0x2300 [ 513.592844][ T9305] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 513.592891][ T9305] ? __lock_acquire+0xab9/0xd20 [ 513.592919][ T9305] ? __pfx_do_exit+0x10/0x10 [ 513.592935][ T9305] ? rt_mutex_slowunlock+0x493/0x8a0 [ 513.592958][ T9305] ? rt_spin_lock+0x1bb/0x2c0 [ 513.592982][ T9305] do_group_exit+0x21c/0x2d0 [ 513.593004][ T9305] get_signal+0x125e/0x1310 [ 513.593039][ T9305] arch_do_signal_or_restart+0x9a/0x750 [ 513.593064][ T9305] ? fput_close_sync+0x119/0x200 [ 513.593086][ T9305] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 513.593119][ T9305] ? exit_to_user_mode_loop+0x40/0x110 [ 513.593148][ T9305] exit_to_user_mode_loop+0x75/0x110 [ 513.593176][ T9305] do_syscall_64+0x2bd/0x3b0 [ 513.593204][ T9305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.593223][ T9305] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 513.593244][ T9305] ? clear_bhb_loop+0x60/0xb0 [ 513.593268][ T9305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.593288][ T9305] RIP: 0033:0x7f60bfa90a7c [ 513.593310][ T9305] Code: Unable to access opcode bytes at 0x7f60bfa90a52. [ 513.593321][ T9305] RSP: 002b:00007ffffc037810 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 513.593342][ T9305] RAX: 0000000000000064 RBX: 00007f60c07e4620 RCX: 00007f60bfa90a7c [ 513.593357][ T9305] RDX: 0000000000000064 RSI: 00007f60c07e4670 RDI: 0000000000000003 [ 513.593371][ T9305] RBP: 0000000000000000 R08: 00007ffffc037864 R09: 000000000000000c [ 513.593384][ T9305] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 513.593396][ T9305] R13: 0000000000000000 R14: 00007f60c07e4670 R15: 0000000000000000 [ 513.593419][ T9305] [ 513.593430][ T9305] Modules linked in: [ 513.593449][ T9305] ---[ end trace 0000000000000000 ]--- [ 513.593462][ T9305] RIP: 0010:klist_remove+0x14d/0x340 [ 513.593490][ T9305] Code: 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 59 1b 31 f7 4d 8b 26 49 83 e4 fe 49 8d bc 24 98 00 00 00 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 37 1b 31 f7 49 8b 84 24 98 00 00 00 48 89 [ 513.593508][ T9305] RSP: 0018:ffffc90005d27600 EFLAGS: 00010202 [ 513.593525][ T9305] RAX: 0000000000000013 RBX: ffff88802135bb80 RCX: 0000000000000000 [ 513.593540][ T9305] RDX: 0000000000000006 RSI: ffffffff8d0384e3 RDI: 0000000000000098 [ 513.593562][ T9305] RBP: ffffc90005d276e8 R08: ffffffff8f1d4437 R09: 1ffffffff1e3a886 [ 513.593578][ T9305] R10: dffffc0000000000 R11: fffffbfff1e3a887 R12: 0000000000000000 [ 513.593593][ T9305] R13: 1ffff11006553a14 R14: ffff888032a9d0a0 R15: dffffc0000000000 [ 513.593610][ T9305] FS: 0000000000000000(0000) GS:ffff8881268c2000(0000) knlGS:0000000000000000 [ 513.593628][ T9305] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 513.593642][ T9305] CR2: 000020000013f030 CR3: 00000000413f0000 CR4: 00000000003526f0 [ 513.593662][ T9305] Kernel panic - not syncing: Fatal exception [ 513.594087][ T9305] Kernel Offset: disabled